QU
Vendor
quadlayers
22
CVEs
0
On KEV
2
New 30D
Products
CF8.1
Checkout Field Manager (Checkout Manager) for WooCommerce
quadlayers
3 CVEs0 on KEV1 new
WS8.8
WP Social Feed Gallery
quadlayers
3 CVEs0 on KEV1 new
PB8.5
Perfect Brands for WooCommerce
quadlayers
4 CVEs0 on KEV0 new
QM9.8
QuadMenu – Mega Menu
quadlayers
2 CVEs0 on KEV0 new
SE5.3
Search Exclude
quadlayers
2 CVEs0 on KEV0 new
AC5.3
AI Copilot
quadlayers
1 CVEs0 on KEV0 new
CM6.5
Checkout Manager
Quadlayers
1 CVEs0 on KEV0 new
QT5.3
QuadLayers TikTok Feed
quadlayers
1 CVEs0 on KEV0 new
SC6.4
Social Chat – Click To Chat App Button
quadlayers
1 CVEs0 on KEV0 new
SF5.3
Social Feed Gallery
quadlayers
1 CVEs0 on KEV0 new
WC6.5
WooCommerce Checkout Manager
QuadLayers
1 CVEs0 on KEV0 new
WM9.8
Wordpress Mega Menu-quadmenu
Quadlayers
1 CVEs0 on KEV0 new
WS4.8
WP Social Chat
Quadlayers
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114705 New | WS WP Social Feed Gallery quadlayers | 6.5 | Oct 24 | WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability |
| CVE-2026-17031 | CF Checkout Field Manager (Checkout Manager) for WooCommerce quadlayers | 8.1 | Oct 15 | Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID |
| CVE-2026-18404 | SC Social Chat – Click To Chat App Button quadlayers | 6.4 | Sep 5 | Social Chat <= 8.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box |
| CVE-2025-13930 | CF Checkout Field Manager (Checkout Manager) for WooCommerce quadlayers | 5.3 | Feb 19 | Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion |
| CVE-2025-12500 | CF Checkout Field Manager (Checkout Manager) for WooCommerce quadlayers | 5.3 | Feb 19 | Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload |
| CVE-2025-62116 | AC AI Copilot quadlayers | 5.3 | Dec 31 | WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability |
| CVE-2025-63016 | QT QuadLayers TikTok Feed quadlayers | 5.3 | Dec 31 | WordPress QuadLayers TikTok Feed plugin <= 4.6.5 - Broken Access Control vulnerability |
| CVE-2025-10646 | SE Search Exclude quadlayers | 4.3 | Nov 25 | Search Exclude <= 2.5.7 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API |
| CVE-2025-10144 | PB Perfect Brands for WooCommerce quadlayers | 6.5 | Nov 24 | Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection |
| CVE-2025-10637 | SF Social Feed Gallery quadlayers | 5.3 | Oct 25 | Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure |
| CVE-2025-58686 | PB Perfect Brands for WooCommerce quadlayers | 8.5 | Sep 22 | WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability |
| CVE-2025-2821 | SE Search Exclude quadlayers | 5.3 | May 7 | Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification |
| CVE-2025-2871 | QM QuadMenu – Mega Menu quadlayers | 4.3 | Apr 12 | WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Update |
| CVE-2024-39640 | WS WP Social Feed Gallery QuadLayers | 6.5 | Nov 1 | WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability |
| CVE-2021-4443 | QM QuadMenu – Mega Menu quadlayers | 9.8 | Oct 16 | WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation |
| CVE-2023-47681 | WC WooCommerce Checkout Manager QuadLayers | 6.5 | Jun 19 | WordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability |
| CVE-2022-2361 | WS WP Social Chat Quadlayers | 4.8 | Aug 22 | The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored… |
| CVE-2022-23982 | PB Perfect Brands For Woocommerce Quadlayers | 7.5 | Feb 18 | The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server information exposure |
| CVE-2022-23981 | PB Perfect Brands For Woocommerce Quadlayers | 4.3 | Feb 18 | The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) |
| CVE-2019-15779 | WS WP Social Feed Gallery Quadlayers | 8.8 | Aug 29 | The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete |