Vulnerabilities in quantumcloud
70 resultsVexday analysis
A QuantumCloud apresenta 34 vulnerabilidades cadastradas, com 9 classificadas como críticas (CVSS alto), mas nenhuma sob exploração ativa confirmada no KEV. A fraqueza dominante é injeção de conteúdo (CWE-79), padrão clássico em aplicações web; o ritmo de descobertas permanece significativo com 8 CVEs nos últimos 90 dias, indicando superfície de ataque em evolução contínua que demanda monitoramento constante.
CVE-2024-32729HIGHWordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2025-31918CRITICALWordPress Simple Business Directory Pro plugin < 15.6.9 - Privilege Escalation vulnerabilityEPSS 0.4%CVE-2022-47613MEDIUMWordPress AI ChatBot Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-52395MEDIUMWordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-12156MEDIUMAI Content Writer, RSS Feed to Post, Autoblogging SEO Help <= 6.1.3 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2021-4424MEDIUMSlider Hero <= 8.2.0 - Cross-Site Request Forgery BypassEPSS 0.4%CVE-2023-23981MEDIUMWordPress Conversational Forms for ChatBot Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-0451MEDIUMAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callbackEPSS 0.4%CVE-2025-53580CRITICALWordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation VulnerabilityEPSS 0.4%CVE-2024-0453MEDIUMAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callbackEPSS 0.4%CVE-2024-0452MEDIUMAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callbackEPSS 0.4%CVE-2024-34380MEDIUMWordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-11928MEDIUMiChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width ParameterEPSS 0.3%CVE-2024-32696MEDIUMWordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-6669MEDIUMAI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-5858MEDIUMInfographic Maker iList <= 4.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title UpdateEPSS 0.3%CVE-2023-5606MEDIUMThe ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficieEPSS 0.3%CVE-2026-57710CRITICALWordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerabilityEPSS 0.3%CVE-2026-40788HIGHWordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-56297MEDIUMWordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%