QuantumCloud vulnerabilities

CVEs per yearBy the year they were published

1. 202313
2. 202412
3. 202525
4. 202625

Newest CVEs

• CVE-2026-111372

  AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action

  quantumcloud · AI ChatBot for WooCommerce – WoowBot

  Medium4.3
• CVE-2026-110886

  WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability

  QuantumCloud · Conversational Forms for ChatBot

  Critical9.8
• CVE-2026-95531

  WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability

  QuantumCloud · Conversational Forms for ChatBot

  High8.8
• CVE-2026-83593

  WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

  quantumcloud · WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

  High7.2
• CVE-2026-17582

  Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate)

  quantumcloud · Slider Hero with Video Background, Animation

  Medium4.9
• CVE-2026-16773

  WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action

  quantumcloud · WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

  Medium5.3
• CVE-2026-16774

  WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action

  quantumcloud · WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

  Medium5.3
• CVE-2026-61953

  WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability

  QuantumCloud · Simple Link Directory Pro

  High7.2
• CVE-2026-61981

  WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability

  QuantumCloud · Simple Link Directory Pro

  Medium5.4
• CVE-2026-15610

  WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function

  quantumcloud · WPBot – AI ChatBot for Live Support, Lead Generation, AI Services

  Medium4.3