WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quick-event-calendar
Published
2025-06-05
Title
Quick Event Calendar <= 1.4.9 - Cross-Site Request Forgery
Slug
quick-event-calendar
Published
2025-09-05
Title
Quick Event Calendar <= 1.4.9 - Cross-Site Request Forgery
Slug
quick-event-manager
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
quick-event-manager
Published
2023-01-12
Title
Quick Event Manager < 9.7.5 - Reflected Cross-Site
Slug
quick-event-manager
Published
2023-01-20
Title
Quick Event Manager < 9.7.5 - Registration Deletion/Update via CSRF
Slug
quick-event-manager
Published
2023-02-14
Title
Quick Event Manager < 9.6.5 - Admin+ Stored XSS
Slug
quick-event-manager
Published
2023-01-20
Title
Quick Event Manager < 9.7.5 - Unauthenticated Stored XSS
Slug
quick-event-manager
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quick-event-manager
Published
2026-09-03
Title
Quick Event Manager < 9.19 - Missing Authorization
Slug
quick-event-manager
Published
2026-09-03
Title
Quick Event Manager < 9.19 - Unauthenticated Stored Cross-Site Scripting
Slug
quick-event-manager
Published
2026-10-29
Title
Quick Event Manager 8.4.6 - 9.18 - Unauthenticated Private and Draft Content Disclosure via ICS Download
Slug
quick-favicon
Published
2025-06-27
Title
Quick Favicon <= 0.22.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quick-featured-images
Published
2024-04-22
Title
Quick Featured Images < 13.7.1 - Missing Authorization to Authenticated (Contributor+) Arbitrary Thumbnail Deletion/Setting
Slug
quick-featured-images
Published
2025-10-14
Title
Quick Featured Images < 13.7.3 - Insecure Direct Object Reference to Image Manipulation
Slug
quick-featured-images
Published
2025-11-07
Title
Quick Featured Images < 13.7.4 - Authenticated (Editor+) SQL Injection via delete_orphaned
Slug
quick-interest-slider
Published
2023-12-19
Title
Loan Repayment Calculator and Application Form < 2.9.4 - Admin+ Stored XSS
Slug
quick-interest-slider
Published
2024-04-05
Title
Loan Repayment Calculator and Application Form < 2.9.5 - Cross-Site Request Forgery
Slug
quick-interest-slider
Published
2025-03-25
Title
Quick Interest Slider <= 3.1.5 - Contributor+ Stored XSS
Slug
quick-interest-slider
Published
2025-11-29
Title
Quick Interest Slider <= 3.1.5 - Missing Authorization
Slug
quick-interest-slider
Published
2025-11-29
Title
Quick Interest Slider < 3.1.6 - Cross-Site Request Forgery
Slug
quick-interest-slider
Published
2026-04-14
Title
Quick Interest Slider < 3.1.6 - Unauthenticated Stored Cross-Site Scripting
Slug
quick-interest-slider
Published
2026-06-24
Title
Quick Interest Slider < 3.1.7 - Reflected Cross-Site Scripting
Slug
quick-learn
Published
2024-11-18
Title
Quick Learn <= 1.0.1 - Unauthenticated PHP Object Injection
Slug
quick-license-manager
Published
2024-12-02
Title
Quick License Manager – WooCommerce Plugin < 2.4.18 - Reflected Cross-Site Scripting
Slug
quick-localization
Published
2025-03-27
Title
Quick Localization <= 0.1.0 - Reflected Cross-Site Scripting