Vulnerabilidades em quantumcloud
75 resultadosAnálise Vexday
A QuantumCloud apresenta 34 vulnerabilidades cadastradas, com 9 classificadas como críticas (CVSS alto), mas nenhuma sob exploração ativa confirmada no KEV. A fraqueza dominante é injeção de conteúdo (CWE-79), padrão clássico em aplicações web; o ritmo de descobertas permanece significativo com 8 CVEs nos últimos 90 dias, indicando superfície de ataque em evolução contínua que demanda monitoramento constante.
CVE-2024-0452MEDIUMAI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callbackEPSS 0.4%CVE-2024-11928MEDIUMiChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width ParameterEPSS 0.4%CVE-2024-34380MEDIUMWordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2024-32696MEDIUMWordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-6669MEDIUMAI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site ScriptingEPSS 0.3%CVE-2025-32296MEDIUMWordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-5858MEDIUMInfographic Maker iList <= 4.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title UpdateEPSS 0.3%CVE-2024-56297MEDIUMWordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-32244MEDIUMWordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-40788HIGHWordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-110886CRITICALWordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-32297HIGHWordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-32499CRITICALWordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-64277MEDIUMWordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2024-12879MEDIUMWPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response CreationEPSS 0.3%CVE-2025-67576MEDIUMWordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-111372MEDIUMAI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX ActionEPSS 0.3%CVE-2025-53200MEDIUMWordPress ChatBot plugin <= 6.7.3 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2026-61953HIGHWordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2023-24415MEDIUMWordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.3%