Vulnerabilidades em quantumcloud
70 resultadosAnálise Vexday
A QuantumCloud apresenta 34 vulnerabilidades cadastradas, com 9 classificadas como críticas (CVSS alto), mas nenhuma sob exploração ativa confirmada no KEV. A fraqueza dominante é injeção de conteúdo (CWE-79), padrão clássico em aplicações web; o ritmo de descobertas permanece significativo com 8 CVEs nos últimos 90 dias, indicando superfície de ataque em evolução contínua que demanda monitoramento constante.
CVE-2025-32244MEDIUMWordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-32296MEDIUMWordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2026-57707CRITICALWordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-32499CRITICALWordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-15106MEDIUMWPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' ParameterEPSS 0.3%CVE-2026-16773MEDIUMWPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX ActionEPSS 0.3%CVE-2025-64277MEDIUMWordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2023-24415MEDIUMWordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%CVE-2025-67576MEDIUMWordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-12879MEDIUMWPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response CreationEPSS 0.3%CVE-2025-32297HIGHWordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-16774MEDIUMWPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX ActionEPSS 0.2%CVE-2026-15610MEDIUMWPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() FunctionEPSS 0.2%CVE-2025-22813MEDIUMWordPress ChatBot Conversational Forms plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-48297HIGHWordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-48162HIGHWordPress Simple Business Directory Pro <= 15.5.1 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-53200MEDIUMWordPress ChatBot plugin <= 6.7.3 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-62952MEDIUMWordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2023-44993MEDIUMWordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2023-5534MEDIUMAI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actionsEPSS 0.2%