WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quform
Published
2026-06-25
Title
Quform - WordPress Form Builder < 2.23.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
quick-adsense
Published
2022-04-02
Title
Quick Adsense < 2.8.2 - Subscriber+ Post Stats Reset
Slug
quick-adsense-reloaded
Published
2024-09-25
Title
Ads by WPQuads – Adsense Ads, Banner Ads, Popup Ads < 2.0.85 - Missing Authorization
Slug
quick-adsense-reloaded
Published
2025-03-27
Title
Ads by WPQuads < 2.0.88 - Unauthenticated SQL Injection
Slug
quick-adsense-reloaded
Published
2025-03-27
Title
Ads by WPQuads < 2.0.88 - Missing Authorization
Slug
quick-adsense-reloaded
Published
2025-09-22
Title
Ads by WPQuads <= 2.0.94 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quick-adsense-reloaded
Published
2026-03-27
Title
Quads Ads Manager for Google AdSense < 2.0.99 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Ad Metadata Parameters
Slug
quick-adsense-reloaded
Published
2026-05-24
Title
Quads Ads Manager for Google AdSense < 3.0.3 - Missing Authorization
Slug
quick-adsense-reloaded
Published
2026-05-28
Title
Quads Ads Manager for Google AdSense < 3.0.3 - Missing Authorization
Slug
quick-adsense-reloaded
Published
2026-06-17
Title
Quads Ads Manager for Google AdSense < 3.0.4 - Unauthenticated Information Exposure
Slug
quick-adsense-reloaded
Published
2026-06-29
Title
Quads Ads Manager for Google AdSense < 3.0.4 - Missing Authorization
Slug
quick-affiliate-store
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-audio-player
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-audio-player
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quick-call-button
Published
2023-11-16
Title
Quick Call Button <= 1.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Slug
quick-chat
Published
2012-06-18
Title
Quick Chat < 4.00 - SQL Injection
Slug
quick-chat
Published
2020-10-14
Title
Quick Chat <= 4.14 - Authenticated Stored Cross-Site Scripting
Slug
quick-chat
Published
2020-10-14
Title
Quick Chat <= 4.14 - Unauthenticated Stored Cross-Site Scripting
Slug
quick-code
Published
2024-08-22
Title
Quick Code <= 1.0 - Stored XSS via CSRF
Slug
quick-contact-form
Published
2014-08-01
Title
Quick Contact Form 6.2 - Unspecified XSS
Slug
quick-contact-form
Published
2013-10-08
Title
Quick Contact Form 6.0 - Stored XSS
Slug
quick-contact-form
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-contact-form
Published
2023-02-06
Title
Quick Contact Form < 8.0.4 - Contributor+ Stored XSS
Slug
quick-contact-form
Published
2023-02-15
Title
Quick Contact Form < 8.0.4 - Admin+ Stored XSS
Slug
quick-contact-form
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting