Quantumcloud - vulnerabilities (CVEs)

95 CVEs in 35 products, 3 in the last 30 days, newest from 2026-10-28.

Products

Wpbot - 27 CVEs
Ai Services - 16 CVEs
Lead Generation - 16 CVEs
Wpbot Ai Chatbot For Live Support - 16 CVEs
Simple Link Directory - 9 CVEs
Chatbot - 8 CVEs
Conversational Forms For Chatbot - 6 CVEs
Ai Chatbot - 5 CVEs
Wpbot Pro Wordpress Chatbot - 5 CVEs
Simple Business Directory Pro - 4 CVEs
Slider Hero - 3 CVEs
Ai Infographic Maker - 2 CVEs
Animation - 2 CVEs
Infographic Maker - 2 CVEs
Kbx Pro Ultimate - 2 CVEs
Seo Help - 2 CVEs
Simple Link Directory Pro - 2 CVEs
Simple Video Directory - 2 CVEs
Slider Hero With Video Background - 2 CVEs
Ai Analytics - 1 CVEs
Ai Chatbot For Woocommerce Woowbot - 1 CVEs
Ai Content Writer - 1 CVEs
Chatbot For Ecommerce 8211 Woowbot - 1 CVEs
Chatbot With Ai - 1 CVEs
Comment Link Remove And Other Comment Tools - 1 CVEs
Floating Action Buttons - 1 CVEs
Floating Buttons - 1 CVEs
Floating Buttons For Woocommerce - 1 CVEs
Highlight - 1 CVEs
Ichart Easy Charts And Graphs - 1 CVEs
Infographic Maker Ilist - 1 CVEs
Qc Seo Help For Llms.txt - 1 CVEs
Subtitle To Article - 1 CVEs
Woowbot Pro Max - 1 CVEs
Wpot - 1 CVEs

Newest CVEs of Quantumcloud

CVE-2026-111372 - CVSS 4.3 (medium), 2026-10-28: The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.0. This is due…
CVE-2026-110886 - CVSS 9.8 (critical), 2026-10-18: Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue…
CVE-2026-95531 - CVSS 8.8 (high), 2026-09-30: Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
CVE-2026-83593 - CVSS 7.2 (high), 2026-09-09: The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation'…
CVE-2026-17582 - CVSS 4.9 (medium), 2026-08-16: The Slider Hero plugin for WordPress is vulnerable to second-order SQL Injection in versions up to, and including, 9.1.7 via the qcld_sliderhero_duplicate()…
CVE-2026-16773 - CVSS 5.3 (medium), 2026-07-28: The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…
CVE-2026-16774 - CVSS 5.3 (medium), 2026-07-28: The Chatbot plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 8.5.9 via the wpcs_send_email() AJAX handler. This…
CVE-2026-61953 - CVSS 7.2 (high), 2026-07-27: Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.
CVE-2026-61981 - CVSS 5.4 (medium), 2026-07-23: Unauthenticated Cross Site Request Forgery (CSRF) in Simple Link Directory Pro <= 15.0.8 versions.
CVE-2026-15610 - CVSS 4.3 (medium), 2026-07-16: The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…
CVE-2026-15106 - CVSS 5.3 (medium), 2026-07-16: The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to authorization bypass in all versions up to, and…
CVE-2026-57710 - CVSS 9.9 (critical), 2026-07-13: Unrestricted Upload of File with Dangerous Type vulnerability in quantumcloud WoowBot Pro Max woowbot-pro-max allows Using Malicious Files.This issue affects…
CVE-2026-57414 - CVSS 6.5 (medium), 2026-07-13: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot for eCommerce – WoowBot…
CVE-2026-57707 - CVSS 9.3 (critical), 2026-07-13: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Business Directory Pro…
CVE-2026-57363 - CVSS 7.1 (high), 2026-07-13: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This…
CVE-2026-57682 - CVSS 7.1 (high), 2026-07-02: Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.
CVE-2026-57362 - CVSS 7.1 (high), 2026-07-02: Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.
CVE-2026-13731 - CVSS 7.2 (high), 2026-07-01: The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation'…
CVE-2025-60223 - CVSS 7.7 (high), 2026-06-17: Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions.
CVE-2024-32729 - CVSS 7.5 (high), 2026-06-17: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path…
CVE-2026-40788 - CVSS 7.1 (high), 2026-06-15: Subscriber Broken Access Control in ChatBot <= 7.9.7 versions.
CVE-2026-53741 - CVSS 5.4 (medium), 2026-06-10: Simple Link Directory through 9.0.4 interpolates the sld_no_results_found option into a JavaScript string literal without encoding. Because…
CVE-2026-53742 - CVSS 5.4 (medium), 2026-06-10: Simple Link Directory through 9.0.4 echoes embed shortcode attributes into HTML data attributes without escaping in the embedder template. Attackers with…
CVE-2026-7209 - CVSS 6.4 (medium), 2026-05-02: The Simple Link Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `qcopd-directory` shortcode in all versions up…
CVE-2026-32499 - CVSS 9.3 (critical), 2026-03-25: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud ChatBot chatbot allows Blind SQL…
CVE-2025-67576 - CVSS 5.3 (medium), 2025-12-09: Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting Incorrectly Configured Access Control…
CVE-2025-67465 - CVSS 4.3 (medium), 2025-12-09: Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Cross Site Request Forgery.This issue…
CVE-2025-64277 - CVSS 5.3 (medium), 2025-11-13: Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-62952 - CVSS 4.3 (medium), 2025-10-27: Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects…
CVE-2025-60232 - CVSS 9.8 (critical), 2025-10-22: Deserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro…