Vulnerabilidades en QuantumCloud
70 resultadosAnálisis Vexday
QuantumCloud apresenta um portfólio moderado de 32 vulnerabilidades, com 3 classificadas como críticas e 7 divulgadas nos últimos 90 dias, indicando pressão contínua de descobertas. Nenhuma vulnerabilidade está sob ataque ativo no momento, reduzindo o risco imediato, mas a predominância de CWE-79 (Cross-site Scripting) aponta para uma fraqueza estrutural na validação de entrada que exige atenção em processos de desenvolvimento.
CVE-2023-5204CRITICALAI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_responseEPSS 6.9%CVE-2023-5241CRITICALAI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld_openai_upload_pagetraining_fileEPSS 2.1%CVE-2023-5212CRITICALAI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_fileEPSS 1.6%CVE-2024-13091CRITICALWPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File UploadEPSS 0.8%CVE-2023-5254MEDIUMAI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_userEPSS 0.8%CVE-2025-26932HIGHWordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerabilityEPSS 0.7%CVE-2023-48741HIGHWordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL InjectionEPSS 0.7%CVE-2025-49901CRITICALWordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerabilityEPSS 0.7%CVE-2026-13731HIGHWPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' ParameterEPSS 0.7%CVE-2025-3812HIGHWPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File DeletionEPSS 0.5%CVE-2025-60232CRITICALWordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerabilityEPSS 0.5%CVE-2025-47582CRITICALWordPress WPBot Pro Wordpress Chatbot <= 12.7.0 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2023-5533MEDIUMAI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actionsEPSS 0.5%CVE-2024-22309HIGHWordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object InjectionEPSS 0.5%CVE-2024-56238MEDIUMWordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-12415MEDIUMAI Infographic Maker <= 4.9.0 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2024-12417MEDIUMSimple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2025-60223HIGHWordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerabilityEPSS 0.4%CVE-2025-31053HIGHWordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion VulnerabilityEPSS 0.4%CVE-2025-32675MEDIUMWordPress SEO Help plugin <= 6.7.9 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.4%