CVEs we hold for Quantumcloud
Records whose assigning authority named Quantumcloud as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-83593WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameterquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2026-7209Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributesquantumcloud Simple Link Directory
CVE-2026-61981WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerabilityQuantumCloud Simple Link Directory Pro
CVE-2026-61953WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerabilityQuantumCloud Simple Link Directory Pro
CVE-2026-57710WordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerabilityquantumcloud WoowBot Pro Max
CVE-2026-57707WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerabilityquantumcloud Simple Business Directory Pro
CVE-2026-57682WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerabilityQuantumCloud Simple Link Directory
CVE-2026-57414WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerabilityQuantumCloud ChatBot for eCommerce – WoowBot
CVE-2026-57363WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerabilityQuantumCloud ChatBot
CVE-2026-57362WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerabilityQuantumCloud ChatBot
CVE-2026-53742Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributesquantumcloud Simple Link Directory
CVE-2026-53741Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Optionquantumcloud Simple Link Directory
CVE-2026-40788WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerabilityQuantumCloud ChatBot
CVE-2026-17582Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description'…quantumcloud Slider Hero with Video Background, Animation
CVE-2026-16774WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Actionquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2026-16773WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Actionquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2026-15610WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via…quantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2026-15106WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameterquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2026-13731WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameterquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2025-67576WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerabilityQuantumCloud Simple Link Directory
CVE-2025-67465WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerabilityQuantumCloud Simple Link Directory
CVE-2025-64277WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerabilityQuantumCloud ChatBot
CVE-2025-62952WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerabilityQuantumCloud ChatBot
CVE-2025-60232WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerabilityquantumcloud KBx Pro Ultimate
CVE-2025-60223WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerabilityQuantumCloud WPBot Pro Wordpress Chatbot
CVE-2025-53580WordPress Simple Business Directory Pro Plugin < 15.6.9 - Privilege Escalation Vulnerabilityquantumcloud Simple Business Directory Pro
CVE-2025-53200WordPress ChatBot plugin <= 6.7.3 - Broken Access Control VulnerabilityQuantumCloud ChatBot
CVE-2025-49901WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerabilityquantumcloud Simple Link Directory
CVE-2025-48297WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerabilityquantumcloud Simple Link Directory
CVE-2025-48162WordPress Simple Business Directory Pro <= 15.5.1 - Cross Site Scripting (XSS) Vulnerabilityquantumcloud Simple Business Directory Pro
CVE-2025-47582WordPress WPBot Pro Wordpress Chatbot <= 12.7.0 - PHP Object Injection VulnerabilityQuantumCloud WPBot Pro Wordpress Chatbot
CVE-2025-3812WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File DeletionQuantumCloud WPBot Pro Wordpress Chatbot
CVE-2025-32675WordPress SEO Help plugin <= 6.7.9 - Server Side Request Forgery (SSRF) vulnerabilityQuantumCloud SEO Help
CVE-2025-32297WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerabilityquantumcloud Simple Link Directory
CVE-2025-32296WordPress Simple Link Directory Pro plugin < 14.8.1 - Broken Access Control Vulnerabilityquantumcloud Simple Link Directory
CVE-2025-32244WordPress SEO Help plugin <= 6.7.9 - Broken Access Control vulnerabilityQuantumCloud SEO Help
CVE-2025-31918WordPress Simple Business Directory Pro plugin < 15.6.9 - Privilege Escalation vulnerabilityquantumcloud Simple Business Directory Pro
CVE-2025-31053WordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion Vulnerabilityquantumcloud KBx Pro Ultimate
CVE-2025-26932WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerabilityQuantumCloud ChatBot
CVE-2025-22813WordPress ChatBot Conversational Forms plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerabilityQuantumCloud Conversational Forms for ChatBot
CVE-2024-6669AI ChatBot for WordPress – WPBot <= 5.5.7 - Authenticated (Administrator+) Stored Cross-Site Scriptingquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2024-5858Infographic Maker iList <= 4.7.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title Updatequantumcloud AI Infographic Maker
CVE-2024-56297WordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerabilityQuantumCloud Highlight
CVE-2024-56238WordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerabilityQuantumCloud Floating Action Buttons
CVE-2024-52395WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerabilityQuantumCloud Floating Buttons for WooCommerce
CVE-2024-34380WordPress ChatBot Conversational Forms plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerabilityQuantumCloud Conversational Forms for ChatBot
CVE-2024-32729WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerabilityQuantumCloud Conversational Forms for ChatBot
CVE-2024-32696WordPress AI Infographic Maker OpenAI plugin <= 4.6.6 - Cross Site Scripting (XSS) vulnerabilityQuantumCloud Infographic Maker – iList
CVE-2024-22309WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object InjectionQuantumCloud ChatBot with AI
CVE-2024-13091WPBot Pro Wordpress Chatbot <= 13.5.4 - Unauthenticated Arbitrary File UploadQuantumCloud WPBot Pro Wordpress Chatbot
CVE-2024-12879WPBot Pro Wordpress Chatbot <= 13.5.5 - Missing Authorization to Authenticated (Subscriber+) Simple Text Response…QuantumCloud WPBot Pro Wordpress Chatbot
CVE-2024-12417Simple Link Directory <= 8.4.5 - Unauthenticated Arbitrary Shortcode Executionquantumcloud Simple Link Directory
CVE-2024-12415AI Infographic Maker <= 4.9.0 - Unauthenticated Arbitrary Shortcode Executionquantumcloud AI Infographic Maker
CVE-2024-12156AI Content Writer, RSS Feed to Post, Autoblogging SEO Help <= 6.1.3 - Reflected Cross-Site Scriptingquantumcloud QC SEO Help for llms.txt, AI Analytics, AI…
CVE-2024-11928iChart – Easy Charts and Graphs <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameterquantumcloud iChart – Easy Charts and Graphs
CVE-2024-0453AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_delete_callbackquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2024-0452AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_upload_callbackquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2024-0451AI ChatBot <= 5.3.4 - Missing Authorization via openai_file_list_callbackquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2023-5534AI ChatBot <= 4.8.9 and 4.9.2 - Cross-Site Request Forgery on AJAX actionsquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2023-5533AI ChatBot <= 4.8.9 and 4.9.2 - Missing Authorization on AJAX actionsquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2023-5254AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_userquantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2023-5241AI ChatBot <= 4.8.9 and 4.9.2 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Write via…quantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2023-5212AI ChatBot <= 4.8.9 and 4.9.2- Authenticated (Subscriber+) Arbitrary File Deletion via qcld_openai_delete_training_filequantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2023-5204AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_responsequantumcloud WPBot – AI ChatBot for Live Support, Lead…
CVE-2023-48741WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL InjectionQuantumCloud AI ChatBot
CVE-2023-44993WordPress ChatBot Plugin <= 4.7.8 is vulnerable to Cross Site Request Forgery (CSRF)QuantumCloud AI ChatBot
CVE-2023-24415WordPress AI ChatBot plugin <= 4.2.8 is vulnerable to Cross Site Request Forgery (CSRF)QuantumCloud AI ChatBot
CVE-2023-23981WordPress Conversational Forms for ChatBot Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)QuantumCloud Conversational Forms for ChatBot
CVE-2022-47613WordPress AI ChatBot Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)QuantumCloud AI ChatBot
CVE-2021-4424Slider Hero <= 8.2.0 - Cross-Site Request Forgery Bypassquantumcloud Slider Hero with Video Background, Animation
72 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.