Vulnerabilidades em QuantumCloud

72 resultados
Análise Vexday

QuantumCloud apresenta um portfólio moderado de 32 vulnerabilidades, com 3 classificadas como críticas e 7 divulgadas nos últimos 90 dias, indicando pressão contínua de descobertas. Nenhuma vulnerabilidade está sob ataque ativo no momento, reduzindo o risco imediato, mas a predominância de CWE-79 (Cross-site Scripting) aponta para uma fraqueza estrutural na validação de entrada que exige atenção em processos de desenvolvimento.

CVE-2024-34380MEDIUMWordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-11928MEDIUMiChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width ParameterEPSS 0.4%CVE-2026-7209MEDIUMSimple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode AttributesEPSS 0.3%CVE-2024-32696MEDIUMWordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-6669MEDIUMAI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2024-5858MEDIUMInfographic Maker iList <= 4.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title UpdateEPSS 0.3%CVE-2026-40788HIGHWordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-5606MEDIUMThe ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficieEPSS 0.3%CVE-2025-32296MEDIUMWordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-32244MEDIUMWordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-56297MEDIUMWordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-32297HIGHWordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2025-67576MEDIUMWordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-64277MEDIUMWordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-12879MEDIUMWPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response CreationEPSS 0.3%CVE-2026-61953HIGHWordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2023-24415MEDIUMWordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2026-57682HIGHWordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57362HIGHWordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57363HIGHWordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%