Vulnerabilidades em QuantumCloud
72 resultadosAnálise Vexday
QuantumCloud apresenta um portfólio moderado de 32 vulnerabilidades, com 3 classificadas como críticas e 7 divulgadas nos últimos 90 dias, indicando pressão contínua de descobertas. Nenhuma vulnerabilidade está sob ataque ativo no momento, reduzindo o risco imediato, mas a predominância de CWE-79 (Cross-site Scripting) aponta para uma fraqueza estrutural na validação de entrada que exige atenção em processos de desenvolvimento.
CVE-2026-16773MEDIUMWPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX ActionEPSS 0.5%CVE-2026-15106MEDIUMWPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' ParameterEPSS 0.5%CVE-2024-56238MEDIUMWordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerabilityEPSS 0.5%CVE-2024-12415MEDIUMAI Infographic Maker <= 4.9.0 - Unauthenticated Arbitrary Shortcode ExecutionEPSS 0.5%CVE-2025-32675MEDIUMWordPress SEO Help plugin <= 6.7.9 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.5%CVE-2025-60223HIGHWordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerabilityEPSS 0.4%CVE-2024-32729HIGHWordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2022-47613MEDIUMWordPress AI ChatBot Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-52395MEDIUMWordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-12156MEDIUMAI Content Writer, RSS Feed to Post, Autoblogging SEO Help <= 6.1.3 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2026-15610MEDIUMWPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() FunctionEPSS 0.4%CVE-2026-16774MEDIUMWPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX ActionEPSS 0.4%CVE-2026-32499CRITICALWordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-57707CRITICALWordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerabilityEPSS 0.4%CVE-2021-4424MEDIUMSlider Hero <= 8.2.0 - Cross-Site Request Forgery BypassEPSS 0.4%CVE-2023-23981MEDIUMWordPress Conversational Forms for ChatBot Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2024-0451MEDIUMAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callbackEPSS 0.4%CVE-2025-53580CRITICALWordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation VulnerabilityEPSS 0.4%CVE-2024-0452MEDIUMAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callbackEPSS 0.4%CVE-2024-0453MEDIUMAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callbackEPSS 0.4%