Quantumcloud vulnerabilities
75 CVEs and advisories name Quantumcloud as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-111372AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action
- CVE-2026-110886WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability
- CVE-2026-95531WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability
- CVE-2026-83593WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
- CVE-2026-17582Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate)
- CVE-2026-16773WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action
- CVE-2026-16774WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action
- CVE-2026-61953WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2026-61981WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2026-15610WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function
- CVE-2026-15106WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter
- CVE-2026-57710WordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerability
- CVE-2026-57707WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability
- CVE-2026-57414WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57363WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57682WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57362WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-13731WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
- CVE-2024-32729WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability
- CVE-2025-60223WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability
- CVE-2026-40788WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability
- CVE-2026-53742Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes
- CVE-2026-53741Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option
- CVE-2026-7209Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
- CVE-2026-32499WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability
- CVE-2025-67576WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability
- CVE-2025-67465WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-64277WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability
- CVE-2025-62952WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability
- CVE-2025-60232WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability