qloapps vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

QL

Product

qloapps

by webkul · last CVE Oct 22, 2026

33

CVEs

0

On KEV

9.8

Max CVSS

13

New 30D

Vulnerabilities33 In the news0 Timeline

Severity mix

Critical 1High 6Medium 26Low 0

Severity

All severities33 Critical1 High6 Medium26 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add qloapps to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-36284	7.5	3%	Jun 23	An unauthenticated Time-Based SQL injection found in Webkul QloApps 1.6.0 via GET parameter date_from, date_to, and id_product allows a remote attacker to bypass a web… Affected: 1.6.0
CVE-2026-75498	7.2	1%	Aug 25	Webkul QloApps SQL injection Affected: before 123c97c
CVE-2026-75497	7.2	1%	Aug 25	Webkul QloApps SQL injection Affected: before 123c97c
CVE-2026-75496	7.2	1%	Aug 25	Webkul QloApps improper file upload validation Affected: before 153ec1c
CVE-2025-6173	7.2	1%	Jun 17	A vulnerability classified as critical was found in Webkul QloApps 1.6.1 Affected: 1.6.1
CVE-2024-40318	7.2	1%	Jul 25	An arbitrary file upload vulnerability in Webkul Qloapps v1.6.0.0 allows attackers to execute arbitrary code via uploading a crafted file Affected: 1.6.0