WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quick-pagepost-redirect-plugin
Published
2023-05-12
Title
Quick Page/Post Redirect < 5.2.4 - Admin+ Stored XSS
Slug
quick-paypal-payments
Published
2014-08-01
Title
Quick Paypal Payments 3.0 - Payment Sending Multiple Parameter XSS
Slug
quick-paypal-payments
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-paypal-payments
Published
2023-04-04
Title
Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS
Slug
quick-paypal-payments
Published
2023-02-10
Title
Quick Paypal Payments < 5.7.26 - Admin+ Stored XSS
Slug
quick-paypal-payments
Published
2023-02-14
Title
Quick Paypal Payments < 5.7.26 - Unauthenticated Stored XSS
Slug
quick-paypal-payments
Published
2023-02-15
Title
Quick Paypal Payments < 5.7.26 - Contributor+ Stored XSS
Slug
quick-paypal-payments
Published
2023-02-14
Title
Quick Paypal Payments < 5.7.26 - Unauthenticated Payment Message Deletion/Update
Slug
quick-paypal-payments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quick-paypal-payments
Published
2025-09-04
Title
Quick Paypal Payments < 5.7.47 - Cross-Site Request Forgery
Slug
quick-playground
Published
2026-04-08
Title
Quick Playground < 1.3.2 - Missing Authorization to Unauthenticated Arbitrary File Upload
Slug
quick-playground
Published
2026-05-14
Title
Quick Playground < 1.3.4 - Unauthenticated Path Traversal to Arbitrary File Read via 'stylesheet' Parameter
Slug
quick-post-widget
Published
2012-08-10
Title
Quick Post Widget 1.9.1 - Multiple Cross-Site Scripting (XSS)
Slug
quick-post-widget
Published
2014-08-27
Title
Quick Post Widget 1.9.1 - Multiple Function CSRF
Slug
quick-restaurant-menu
Published
2023-01-27
Title
Quick Restaurant Menu < 2.1.0 - Subscriber+ Arbitrary Post Deletion/Updating
Slug
quick-restaurant-menu
Published
2023-01-27
Title
Quick Restaurant Menu < 2.1.0 - Admin+ Stored XSS
Slug
quick-restaurant-menu
Published
2023-01-27
Title
Quick Restaurant Menu < 2.1.0 - Menu Items Update via CSRF
Slug
quick-restaurant-reservations
Published
2022-05-12
Title
Quick Restaurant Reservations < 1.4.2 - Reflected Cross-Site Scripting
Slug
quick-restaurant-reservations
Published
2022-11-09
Title
Quick Restaurant Reservations < 1.5.5 - CSRF
Slug
quick-restaurant-reservations
Published
2026-01-26
Title
Quick Restaurant Reservations <= 1.6.7 - Missing Authorization
Slug
quick-subscribe
Published
2022-05-23
Title
Quick Subscribe <= 1.7.1 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
quick-table
Published
2026-05-11
Title
Quick Table <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
Slug
quick-testimonials
Published
2025-12-12
Title
Quick Testimonials <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
quick-view-and-buy-now-for-woocommerce
Published
2023-11-07
Title
Direct Checkout – Quick View – Buy Now For WooCommerce < 1.5.9 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Custom CSS Code
Slug
quickcab
Published
2025-05-29
Title
QuickCab <= 1.3.3 - Missing Authorization