Login Request a demo
QU
Vendor
Quantumcloud
19 products with CVEs on record
66
CVEs
0
On KEV
3
New 30D
Products
CF
Conversational Forms for ChatBot
QuantumCloud
9.8
5 CVEs0 on KEV2 new
AC
AI ChatBot for WooCommerce – WoowBot
quantumcloud
4.3
1 CVEs0 on KEV1 new
WP
Wpbot
Quantumcloud
9.8
27 CVEs0 on KEV0 new
SL
Simple Link Directory
quantumcloud
9.8
6 CVEs0 on KEV0 new
WA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
quantumcloud
7.2
6 CVEs0 on KEV0 new
CH
ChatBot
QuantumCloud
8.8
4 CVEs0 on KEV0 new
SH
Slider Hero
Quantumcloud
8.8
3 CVEs0 on KEV0 new
SL
Simple Link Directory Pro
QuantumCloud
7.2
2 CVEs0 on KEV0 new
SV
Simple Video Directory
Quantumcloud
9.8
2 CVEs0 on KEV0 new
CF
ChatBot for eCommerce – WoowBot
QuantumCloud
6.5
1 CVEs0 on KEV0 new
CL
Comment Link Remove And Other Comment Tools
Quantumcloud
4.3
1 CVEs0 on KEV0 new
FA
Floating Action Buttons
QuantumCloud
5.3
1 CVEs0 on KEV0 new
HI
Highlight
QuantumCloud
5.9
1 CVEs0 on KEV0 new
IM
Infographic Maker
Quantumcloud
9.8
1 CVEs0 on KEV0 new
SB
Simple Business Directory Pro
quantumcloud
9.3
1 CVEs0 on KEV0 new
SH
Slider Hero with Video Background, Animation
quantumcloud
4.9
1 CVEs0 on KEV0 new
WP
WoowBot Pro Max
quantumcloud
9.9
1 CVEs0 on KEV0 new
WP
WPBot Pro Wordpress Chatbot
QuantumCloud
7.7
1 CVEs0 on KEV0 new
WP
Wpot
Quantumcloud
4.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111372
New
AC
AI ChatBot for WooCommerce – WoowBot
quantumcloud
4.3–Oct 28AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action
CVE-2026-110886
CF
Conversational Forms for ChatBot
QuantumCloud
9.8
0%
Oct 18WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability
CVE-2026-95531
CF
Conversational Forms for ChatBot
QuantumCloud
8.8
0%
Sep 30WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability
CVE-2026-83593
WA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
quantumcloud
7.2
1%
Sep 9WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
CVE-2026-17582
SH
Slider Hero with Video Background, Animation
quantumcloud
4.9
0%
Aug 16Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate)
CVE-2026-16773
WA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
quantumcloud
5.3
0%
Jul 28WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action
CVE-2026-16774
WA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
quantumcloud
5.3
0%
Jul 28WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action
CVE-2026-61953
SL
Simple Link Directory Pro
QuantumCloud
7.2
0%
Jul 27WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-61981
SL
Simple Link Directory Pro
QuantumCloud
5.4
0%
Jul 23WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-15610
WA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
quantumcloud
4.3
0%
Jul 16WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function
CVE-2026-15106
WA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
quantumcloud
5.3
0%
Jul 16WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter
CVE-2026-57710
WP
WoowBot Pro Max
quantumcloud
9.9
0%
Jul 13WordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerability
CVE-2026-57707
SB
Simple Business Directory Pro
quantumcloud
9.3
0%
Jul 13WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability
CVE-2026-57414
CF
ChatBot for eCommerce &#8211; WoowBot
QuantumCloud
6.5
0%
Jul 13WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57363
CH
ChatBot
QuantumCloud
7.1
0%
Jul 13WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57682
SL
Simple Link Directory
QuantumCloud
7.1
0%
Jul 2WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57362
CH
ChatBot
QuantumCloud
7.1
0%
Jul 2WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-13731
WA
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services
quantumcloud
7.2
1%
Jul 1WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter
CVE-2024-32729
CF
Conversational Forms for ChatBot
QuantumCloud
7.5
0%
Jun 17WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability
CVE-2025-60223
WP
WPBot Pro Wordpress Chatbot
QuantumCloud
7.7
0%
Jun 17WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability
CVE-2026-40788
CH
ChatBot
QuantumCloud
7.1
0%
Jun 15WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability
CVE-2026-53742
SL
Simple Link Directory
quantumcloud
5.4
0%
Jun 10Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes
CVE-2026-53741
SL
Simple Link Directory
quantumcloud
5.4
0%
Jun 10Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option
CVE-2026-7209
SL
Simple Link Directory
quantumcloud
6.4
0%
May 2Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
CVE-2025-9111
WP
Wpbot
Quantumcloud
3.5
0%
Sep 9The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2025-0329
WP
Wpbot
Quantumcloud
4.8
0%
May 15The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
CVE-2024-6809
SV
Simple Video Directory
Quantumcloud
9.8
1%
May 15The Simple Video Directory WordPress plugin before 1.4.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to…
CVE-2024-12879
WP
Wpot
Quantumcloud
4.3
0%
Jan 22The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'qc_wp_latest_update_check_pro'…
CVE-2025-22813
CF
Conversational Forms for ChatBot
QuantumCloud
6.5
0%
Jan 9WordPress ChatBot Conversational Forms plugin <= 1.4.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56297
HI
Highlight
QuantumCloud
5.9
0%
Jan 7WordPress Highlight plugin <= 2.0.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-56238
FA
Floating Action Buttons
QuantumCloud
5.3
0%
Jan 2WordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerability
CVE-2024-6669
WP
Wpbot
Quantumcloud
4.8
0%
Jul 17The AI ChatBot for WordPress – WPBot plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 5.5.7 due to…
CVE-2024-5811
SV
Simple Video Directory
Quantumcloud
5.4
0%
Jul 12The Simple Video Directory WordPress plugin before 1.4.4 does not sanitise and escape some of its settings, which could allow contributors and higher to perform Stored Cross-Site…
CVE-2024-0453
WP
Wpbot
Quantumcloud
7.7
0%
May 22The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_delete_callback function in all…
CVE-2024-0452
WP
Wpbot
Quantumcloud
7.7
0%
May 22The AI ChatBot plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the openai_file_upload_callback function in all…
CVE-2024-0451
WP
Wpbot
Quantumcloud
5.0
0%
May 22The AI ChatBot plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the openai_file_list_callback function in all versions up to,…
CVE-2024-22309
WP
Wpbot
Quantumcloud
9.8
1%
Jan 24Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0
CVE-2023-48741
WP
Wpbot
Quantumcloud
7.2
1%
Dec 19Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: from n/a through 4.7.8
CVE-2023-5606
WP
Wpbot
Quantumcloud
4.8
0%
Nov 2The ChatBot for WordPress is vulnerable to Stored Cross-Site Scripting via the FAQ Builder in versions 4.8.6 through 4.9.6 due to insufficient input sanitization and output…
CVE-2023-5534
WP
Wpbot
Quantumcloud
5.4
0%
Oct 20The AI ChatBot plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.8.9 and 4.9.2
CVE-2023-5533
WP
Wpbot
Quantumcloud
9.8
1%
Oct 20The AI ChatBot plugin for WordPress is vulnerable to unauthorized use of AJAX actions due to missing capability checks on the corresponding functions in versions up to, and…
CVE-2023-5254
WP
Wpbot
Quantumcloud
5.3
1%
Oct 19The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chatbot_check_user function
CVE-2023-5241
WP
Wpbot
Quantumcloud
8.1
3%
Oct 19The AI ChatBot for WordPress is vulnerable to Directory Traversal in versions up to, and including, 4.8.9 as well as 4.9.2 via the qcld_openai_upload_pagetraining_file function
CVE-2023-5212
WP
Wpbot
Quantumcloud
8.1
2%
Oct 19The AI ChatBot plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 4.8.9 as well as version 4.9.2
CVE-2023-5204
WP
Wpbot
Quantumcloud
7.5
8%
Oct 19The ChatBot plugin for WordPress is vulnerable to SQL Injection via the $strid parameter in versions up to, and including, 4.8.9 due to insufficient escaping on the user supplied…
CVE-2023-44993
WP
Wpbot
Quantumcloud
8.8
0%
Oct 9Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.7.8 versions
CVE-2023-4254
WP
Wpbot
Quantumcloud
4.8
0%
Sep 4The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site…
CVE-2023-4253
WP
Wpbot
Quantumcloud
4.8
0%
Sep 4The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site…
CVE-2021-4424
SH
Slider Hero
Quantumcloud
4.3
0%
Jul 12The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0
CVE-2023-3175
WP
Wpbot
Quantumcloud
4.8
1%
Jul 10The AI ChatBot WordPress plugin before 4.6.1 does not adequately escape some settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even…
CVE-2023-2811
WP
Wpbot
Quantumcloud
4.8
0%
Jun 19The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2023-2742
WP
Wpbot
Quantumcloud
4.8
0%
Jun 19The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scripting attacks even…
CVE-2023-1660
WP
Wpbot
Quantumcloud
6.1
0%
May 8The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in a function hooked to init, allowing unauthenticated users to update some settings, leading to…
CVE-2023-1651
WP
Wpbot
Quantumcloud
5.4
0%
May 8The AI ChatBot WordPress plugin before 4.4.9 does not have authorisation and CSRF in the AJAX action responsible to update the OpenAI settings, allowing any authenticated users,…
CVE-2023-1650
WP
Wpbot
Quantumcloud
9.8
34%
May 8The AI ChatBot WordPress plugin before 4.4.7 unserializes user input from cookies via an AJAX action available to unauthenticated users, which could allow them to perform PHP…
CVE-2023-1649
WP
Wpbot
Quantumcloud
4.8
0%
May 8The AI ChatBot WordPress plugin before 4.5.1 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to perform Stored…
CVE-2023-1011
WP
Wpbot
Quantumcloud
6.1
0%
May 8The AI ChatBot WordPress plugin before 4.4.5 does not escape most of its settings before outputting them back in the dashboard, and does not have a proper CSRF check, allowing…
CVE-2023-23981
CF
Conversational Forms For Chatbot
Quantumcloud
4.8
0%
Apr 6Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud Conversational Forms for ChatBot plugin <= 1.1.6 versions
CVE-2022-47613
WP
Wpbot
Quantumcloud
4.8
0%
Mar 29Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QuantumCloud AI ChatBot plugin <= 4.3.0 versions
CVE-2023-24415
CH
Chatbot
Quantumcloud
8.8
0%
Feb 23Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <= 4.2.8 versions