# cve.now: Quantumcloud

The newest entries naming Quantumcloud as an affected vendor (up to 200), of 75 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-111372](https://cve.now/CVE-2026-111372.md): AI ChatBot for WooCommerce \<= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld\_rag\_manual\_sync AJAX Action (CVSS 4.3)
- [CVE-2026-110886](https://cve.now/CVE-2026-110886.md): WordPress Conversational Forms for ChatBot plugin \<= 1.5.1 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2026-95531](https://cve.now/CVE-2026-95531.md): WordPress Conversational Forms for ChatBot plugin \<= 1.5.0 - PHP Object Injection vulnerability (CVSS 8.8)
- [CVE-2026-83593](https://cve.now/CVE-2026-83593.md): WPBot \<= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter (CVSS 7.2)
- [CVE-2026-17582](https://cve.now/CVE-2026-17582.md): Slider Hero with Video Background, Animation \<= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate) (CVSS 4.9)
- [CVE-2026-16773](https://cve.now/CVE-2026-16773.md): WPBot \<= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot\_send\_email\_transcript' AJAX Action (CVSS 5.3)
- [CVE-2026-16774](https://cve.now/CVE-2026-16774.md): WPBot \<= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs\_send\_email AJAX Action (CVSS 5.3)
- [CVE-2026-61953](https://cve.now/CVE-2026-61953.md): WordPress Simple Link Directory Pro plugin \<= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability (CVSS 7.2)
- [CVE-2026-61981](https://cve.now/CVE-2026-61981.md): WordPress Simple Link Directory Pro plugin \<= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- [CVE-2026-15610](https://cve.now/CVE-2026-15610.md): WPBot \<= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax\_rag\_manual\_sync() Function (CVSS 4.3)
- [CVE-2026-15106](https://cve.now/CVE-2026-15106.md): WPBot \<= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter (CVSS 5.3)
- [CVE-2026-57710](https://cve.now/CVE-2026-57710.md): WordPress WoowBot Pro Max plugin \<= 14.1.7 - Arbitrary File Upload vulnerability (CVSS 9.9)
- [CVE-2026-57707](https://cve.now/CVE-2026-57707.md): WordPress Simple Business Directory Pro plugin \<= 15.9.4 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2026-57414](https://cve.now/CVE-2026-57414.md): WordPress ChatBot for eCommerce – WoowBot plugin \<= 4.6.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2026-57363](https://cve.now/CVE-2026-57363.md): WordPress ChatBot plugin \<= 8.3.7 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-57682](https://cve.now/CVE-2026-57682.md): WordPress Simple Link Directory plugin \<= 15.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-57362](https://cve.now/CVE-2026-57362.md): WordPress ChatBot plugin \<= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- [CVE-2026-13731](https://cve.now/CVE-2026-13731.md): WPBot \<= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter (CVSS 7.2)
- [CVE-2024-32729](https://cve.now/CVE-2024-32729.md): WordPress ChatBot Conversational Forms plugin \<= 1.1.8 - Arbitrary File Download vulnerability (CVSS 7.5)
- [CVE-2025-60223](https://cve.now/CVE-2025-60223.md): WordPress WPBot Pro Wordpress Chatbot plugin \<= 13.6.5 - Arbitrary File Deletion vulnerability (CVSS 7.7)
- [CVE-2026-40788](https://cve.now/CVE-2026-40788.md): WordPress ChatBot plugin \<= 7.9.7 - Broken Access Control vulnerability (CVSS 7.1)
- [CVE-2026-53742](https://cve.now/CVE-2026-53742.md): Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes (CVSS 5.1)
- [CVE-2026-53741](https://cve.now/CVE-2026-53741.md): Simple Link Directory through 9.0.4 Stored XSS via sld\_no\_results\_found Option (CVSS 5.1)
- [CVE-2026-7209](https://cve.now/CVE-2026-7209.md): Simple Link Directory \<= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4)
- [CVE-2026-32499](https://cve.now/CVE-2026-32499.md): WordPress ChatBot plugin \<= 7.7.9 - SQL Injection vulnerability (CVSS 9.3)
- [CVE-2025-67576](https://cve.now/CVE-2025-67576.md): WordPress Simple Link Directory plugin \<= 8.8.3 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-67465](https://cve.now/CVE-2025-67465.md): WordPress Simple Link Directory plugin \<= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- [CVE-2025-64277](https://cve.now/CVE-2025-64277.md): WordPress ChatBot plugin \<= 7.3.9 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2025-62952](https://cve.now/CVE-2025-62952.md): WordPress ChatBot plugin \<= 7.7.3 - Broken Access Control vulnerability (CVSS 4.3)
- [CVE-2025-60232](https://cve.now/CVE-2025-60232.md): WordPress KBx Pro Ultimate plugin \<= 8.0.5 - PHP Object Injection vulnerability (CVSS 9.8)
- [CVE-2025-49901](https://cve.now/CVE-2025-49901.md): WordPress Simple Link Directory plugin \< 14.8.1 - Broken Authentication vulnerability (CVSS 9.8)
- [CVE-2025-48162](https://cve.now/CVE-2025-48162.md): WordPress Simple Business Directory Pro \<= 15.5.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-48297](https://cve.now/CVE-2025-48297.md): WordPress Simple Link Directory \< 14.8.1 - Cross Site Scripting (XSS) Vulnerability (CVSS 7.1)
- [CVE-2025-53580](https://cve.now/CVE-2025-53580.md): WordPress Simple Business Directory Pro Plugin \< 15.6.9 - Privilege Escalation Vulnerability (CVSS 9.8)
- [CVE-2025-32297](https://cve.now/CVE-2025-32297.md): WordPress Simple Link Directory Pro plugin \< 14.8.1 - SQL Injection Vulnerability (CVSS 8.5)
- [CVE-2025-53200](https://cve.now/CVE-2025-53200.md): WordPress ChatBot plugin \<= 6.7.3 - Broken Access Control Vulnerability (CVSS 4.3)
- [CVE-2025-31053](https://cve.now/CVE-2025-31053.md): WordPress KBx Pro Ultimate plugin \< 8.0.5 - Arbitrary File Deletion Vulnerability (CVSS 7.7)
- [CVE-2025-31918](https://cve.now/CVE-2025-31918.md): WordPress Simple Business Directory Pro plugin \< 15.6.9 - Privilege Escalation vulnerability (CVSS 9.8)
- [CVE-2025-47582](https://cve.now/CVE-2025-47582.md): WordPress WPBot Pro Wordpress Chatbot \<= 12.7.0 - PHP Object Injection Vulnerability (CVSS 9.8)
- [CVE-2025-3812](https://cve.now/CVE-2025-3812.md): WPBot Pro Wordpress Chatbot \<= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.1)
- [CVE-2025-32296](https://cve.now/CVE-2025-32296.md): WordPress Simple Link Directory Pro plugin \< 14.8.1 - Broken Access Control Vulnerability (CVSS 5.3)
- [CVE-2025-32244](https://cve.now/CVE-2025-32244.md): WordPress SEO Help plugin \<= 6.7.9 - Broken Access Control vulnerability (CVSS 6.5)
- [CVE-2025-32675](https://cve.now/CVE-2025-32675.md): WordPress SEO Help plugin \<= 6.7.9 - Server Side Request Forgery (SSRF) vulnerability (CVSS 6.8)
- [CVE-2025-26932](https://cve.now/CVE-2025-26932.md): WordPress WPBot plugin \<= 6.3.5 - Local File Inclusion vulnerability (CVSS 7.5)
- [CVE-2024-12415](https://cve.now/CVE-2024-12415.md): AI Infographic Maker \<= 4.9.0 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5)
- [CVE-2024-12879](https://cve.now/CVE-2024-12879.md): WPBot Pro Wordpress Chatbot \<= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response Creation (CVSS 4.3)
- [CVE-2024-13091](https://cve.now/CVE-2024-13091.md): WPBot Pro Wordpress Chatbot \<= 13.5.4 - Unauthenticated Arbitrary File Upload (CVSS 9.8)
- [CVE-2025-22813](https://cve.now/CVE-2025-22813.md): WordPress ChatBot Conversational Forms plugin \<= 1.4.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-56297](https://cve.now/CVE-2024-56297.md): WordPress Highlight plugin \<= 2.0.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-56238](https://cve.now/CVE-2024-56238.md): WordPress Floating Action Buttons plugin \<= 0.9.1 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-12417](https://cve.now/CVE-2024-12417.md): Simple Link Directory \<= 8.4.5 - Unauthenticated Arbitrary Shortcode Execution (CVSS 6.5)
- [CVE-2024-12156](https://cve.now/CVE-2024-12156.md): AI Content Writer, RSS Feed to Post, Autoblogging SEO Help \<= 6.1.3 - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2024-11928](https://cve.now/CVE-2024-11928.md): iChart – Easy Charts and Graphs \<= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter (CVSS 6.4)
- [CVE-2024-52395](https://cve.now/CVE-2024-52395.md): WordPress Floating Buttons for WooCommerce plugin \<= 2.8.8 - Broken Access Control vulnerability (CVSS 5.3)
- [CVE-2024-6669](https://cve.now/CVE-2024-6669.md): AI ChatBot for WordPress – WPBot \<= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scripting (CVSS 5.5)
- [CVE-2024-5858](https://cve.now/CVE-2024-5858.md): Infographic Maker iList \<= 4.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title Update (CVSS 4.3)
- [CVE-2024-0453](https://cve.now/CVE-2024-0453.md): AI ChatBot \<= 5.3.4 - Missing Authorization via openai\_file\_delete\_callback (CVSS 5.0)
- [CVE-2024-0452](https://cve.now/CVE-2024-0452.md): AI ChatBot \<= 5.3.4 - Missing Authorization via openai\_file\_upload\_callback (CVSS 5.0)
- [CVE-2024-0451](https://cve.now/CVE-2024-0451.md): AI ChatBot \<= 5.3.4 - Missing Authorization via openai\_file\_list\_callback (CVSS 5.0)
- [CVE-2024-34380](https://cve.now/CVE-2024-34380.md): WordPress ChatBot Conversational Forms plugin \<= 1.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.9)
- [CVE-2024-32696](https://cve.now/CVE-2024-32696.md): WordPress AI Infographic Maker OpenAI plugin \<= 4.6.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- [CVE-2024-22309](https://cve.now/CVE-2024-22309.md): WordPress ChatBot Plugin \<= 5.1.0 is vulnerable to PHP Object Injection (CVSS 8.7)
- [CVE-2023-48741](https://cve.now/CVE-2023-48741.md): WordPress ChatBot Plugin \<= 4.7.8 is vulnerable to SQL Injection (CVSS 7.6)
- [CVE-2023-5606](https://cve.now/CVE-2023-5606.md): The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficie (CVSS 4.4)
- [CVE-2023-5533](https://cve.now/CVE-2023-5533.md): AI ChatBot \<= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actions (CVSS 5.3)
- [CVE-2023-5534](https://cve.now/CVE-2023-5534.md): AI ChatBot \<= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actions (CVSS 4.3)
- [CVE-2023-5254](https://cve.now/CVE-2023-5254.md): AI ChatBot \<= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld\_wb\_chatbot\_check\_user (CVSS 5.3)
- [CVE-2023-5212](https://cve.now/CVE-2023-5212.md): AI ChatBot \<= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld\_openai\_delete\_training\_file (CVSS 9.6)
- [CVE-2023-5204](https://cve.now/CVE-2023-5204.md): AI ChatBot \<= 4.8.9 - Unauthenticated SQL Injection via qc\_wpbo\_search\_response (CVSS 9.8)
- [CVE-2023-5241](https://cve.now/CVE-2023-5241.md): AI ChatBot \<= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via qcld\_openai\_upload\_pagetraining\_file (CVSS 9.6)
- [CVE-2023-44993](https://cve.now/CVE-2023-44993.md): WordPress ChatBot Plugin \<= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 4.3)
- [CVE-2021-4424](https://cve.now/CVE-2021-4424.md): Slider Hero \<= 8.2.0 - Cross-Site Request Forgery Bypass (CVSS 4.3)
- [CVE-2023-23981](https://cve.now/CVE-2023-23981.md): WordPress Conversational Forms for ChatBot Plugin \<= 1.1.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2022-47613](https://cve.now/CVE-2022-47613.md): WordPress AI ChatBot Plugin \<= 4.3.0 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.9)
- [CVE-2023-24415](https://cve.now/CVE-2023-24415.md): WordPress AI ChatBot plugin \<= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 5.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/quantumcloud
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.