Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
quantumcloud vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-47613
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions.
Quantumcloud Ai Chatbot
NA
CVE-2023-2742
The AI ChatBot WordPress plugin prior to 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
Quantumcloud Ai Chatbot
NA
CVE-2023-5606
The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 up to and including 4.9.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissi...
Quantumcloud Ai Chatbot
NA
CVE-2023-1011
The AI ChatBot WordPress plugin prior to 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing malicious users to make a logged in admin set XSS payloads in them.
Quantumcloud Ai Chatbot
NA
CVE-2022-3074
The Slider Hero WordPress plugin prior to 8.4.4 does not escape the slider Name, which could allow high-privileged users to perform Cross-Site Scripting attacks.
Quantumcloud Slider Hero
578
VMScore
CVE-2021-24506
The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin prior to 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injecti...
Quantumcloud Slider Hero
668
VMScore
CVE-2022-0760
The Simple Link Directory WordPress plugin prior to 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX action (available to unauthenticated and authenticated users), leading to an unauthenticated SQL Inject...
Quantumcloud Simple Link Directory
383
VMScore
CVE-2019-13463
An XSS vulnerability in qcopd-shortcode-generator.php in the Simple Link Directory plugin prior to 7.3.5 for WordPress allows remote malicious users to inject arbitrary web script or HTML, because esc_html is not called for the "echo get_the_title()" or "echo $term...
Quantumcloud Simple Link Directory
NA
CVE-2023-23981
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions.
Quantumcloud Conversational Forms For Chatbot
383
VMScore
CVE-2021-24725
The Comment Link Remove and Other Comment Tools WordPress plugin prior to 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow malicious users to make logged in admin delete arbitrary comments
Quantumcloud Comment Link Remove And Other Comment Tools
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028
memory leak
log injection
CVE-2024-3400
CVE-2022-48695
CVE-2022-48675
CVE-2024-34487
CVE-2024-33792
spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »