Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
quantumcloud vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-44993
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions.
Quantumcloud Ai Chatbot
6.5
CVSSv2
CVE-2021-24506
The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin prior to 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injecti...
Quantumcloud Slider Hero
NA
CVE-2024-22309
Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a up to and including 5.1.0.
Quantumcloud Ai Chatbot
NA
CVE-2023-4253
The AI ChatBot WordPress plugin prior to 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite s...
Quantumcloud Ai Chatbot
7.5
CVSSv2
CVE-2022-0747
The Infographic Maker WordPress plugin prior to 4.3.8 does not validate and escape the post_id parameter before using it in a SQL statement via the qcld_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Injection
Quantumcloud Infographic Maker
NA
CVE-2023-3175
The AI ChatBot WordPress plugin prior to 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Quantumcloud Ai Chatbot
4.3
CVSSv2
CVE-2019-13463
An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin prior to 7.3.5 for WordPress allows remote malicious users to inject arbitrary web script or HTML, because esc_html is not called for the "echo get_the_title()" or "echo $term...
Quantumcloud Simple Link Directory
7.5
CVSSv2
CVE-2022-0760
The Simple Link Directory WordPress plugin prior to 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Inject...
Quantumcloud Simple Link Directory
NA
CVE-2023-23981
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions.
Quantumcloud Conversational Forms For Chatbot
4.3
CVSSv2
CVE-2021-24725
The Comment Link Remove and Other Comment Tools WordPress plugin prior to 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow malicious users to make logged in admin delete arbitrary comments
Quantumcloud Comment Link Remove And Other Comment Tools
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581
reflected XSS
CVE-2024-26925
CVE-2024-27956
LFI
CVE-2024-3607
CVE-2024-3107
CVE-2024-3295
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »