WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
quick-paypal-payments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
quick-paypal-payments
Published
2025-09-04
Title
Quick Paypal Payments < 5.7.47 - Cross-Site Request Forgery
Slug
quick-post-widget
Published
2012-08-10
Title
Quick Post Widget 1.9.1 - Multiple Cross-Site Scripting (XSS)
Slug
quick-post-widget
Published
2014-08-27
Title
Quick Post Widget 1.9.1 - Multiple Function CSRF
Slug
quick-restaurant-menu
Published
2023-01-27
Title
Quick Restaurant Menu < 2.1.0 - Subscriber+ Arbitrary Post Deletion/Updating
Slug
quick-restaurant-menu
Published
2023-01-27
Title
Quick Restaurant Menu < 2.1.0 - Admin+ Stored XSS
Slug
quick-restaurant-menu
Published
2023-01-27
Title
Quick Restaurant Menu < 2.1.0 - Menu Items Update via CSRF
Slug
quick-restaurant-reservations
Published
2022-05-12
Title
Quick Restaurant Reservations < 1.4.2 - Reflected Cross-Site Scripting
Slug
quick-restaurant-reservations
Published
2022-11-09
Title
Quick Restaurant Reservations < 1.5.5 - CSRF
Slug
quick-restaurant-reservations
Published
2026-01-26
Title
Quick Restaurant Reservations <= 1.6.7 - Missing Authorization
Slug
quick-subscribe
Published
2022-05-23
Title
Quick Subscribe <= 1.7.1 - Arbitrary Settings Update via CSRF to Stored XSS
Slug
quick-testimonials
Published
2025-12-12
Title
Quick Testimonials <= 2.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
quick-view-and-buy-now-for-woocommerce
Published
2023-11-07
Title
Direct Checkout – Quick View – Buy Now For WooCommerce < 1.5.9 - Authenticated (Shop manager+) Stored Cross-Site Scripting via Custom CSS Code
Slug
quickcab
Published
2025-05-29
Title
QuickCab <= 1.3.3 - Missing Authorization
Slug
quickcal
Published
2025-05-16
Title
QuickCal < 1.0.16 - Cross-Site Request Forgery to Privilege Escalation
Slug
quickcal
Published
2025-05-16
Title
QuickCal < 1.0.16 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
quickcreator
Published
2025-10-23
Title
Quickcreator – AI Blog Writer 0.0.9 - 0.1.17 - Unauthenticated API Key Exposure
Slug
quickiebar
Published
2024-05-06
Title
QuickieBar <= 1.8.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
quicksand-jquery-post-filter
Published
2024-02-02
Title
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Cross-Site Request Forgery via renderAdmin
Slug
quicksand-jquery-post-filter
Published
2024-02-02
Title
Quicksand Post Filter jQuery Plugin <= 3.1.1 - Missing Authorization via quicksand_admin_ajax
Slug
quickswish
Published
2023-02-28
Title
QuickSwish < 1.1.0 - Arbitrary Plugin Activation via CSRF
Slug
quicq
Published
2025-11-12
Title
Convert WebP & AVIF | Quicq | Best image optimizer and compression plugin | Improve your Google Pagespeed <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Afosto Disconnect
Slug
quietly-insights
Published
2024-12-11
Title
Quietly Insights <= 1.2.2 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Slug
quillforms
Published
2023-10-24
Title
Quill Forms < 3.4.0 - Cross-Site Request Forgery
Slug
quillforms
Published
2024-09-30
Title
Quill Forms < 3.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting