Quomodosoft - vulnerabilities (CVEs)
12 CVEs in 6 products, 0 in the last 30 days, newest from 2025-05-07.
Products
- Elementsready Addons For Elementor - 9 CVEs
- Elementsready - 8 CVEs
- Qs Dark Mode - 1 CVEs
- Qs Dark Mode Plugin - 1 CVEs
- Shopready - 1 CVEs
- Adirectory - 0 CVEs
Newest CVEs of Quomodosoft
- CVE-2025-47628 - CVSS 8.8 (high), 2025-05-07: Missing Authorization vulnerability in quomodosoft QS Dark Mode qs-dark-mode allows Exploiting Incorrectly Configured Access Control Security Levels.This…
- CVE-2025-39546 - CVSS 4.3 (medium), 2025-04-16: Cross-Site Request Forgery (CSRF) vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite allows Cross Site Request Forgery.This…
- CVE-2024-10356 - CVSS 4.3 (medium), 2024-12-17: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 6.4.8 in…
- CVE-2024-54224 - CVSS 6.5 (medium), 2024-12-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
- CVE-2024-52497 - CVSS 7.5 (high), 2024-11-28: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in quomodosoft Shopready…
- CVE-2024-51787 - CVSS 6.5 (medium), 2024-11-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
- CVE-2024-9444 - CVSS 6.4 (medium), 2024-10-16: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and…
- CVE-2024-47353 - CVSS 6.1 (medium), 2024-10-11: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in quomodosoft ElementsReady Addons for Elementor element-ready-lite.This issue affects…
- CVE-2024-47329 - CVSS 6.5 (medium), 2024-10-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quomodosoft ElementsReady Addons for Elementor…
- CVE-2024-9118 - CVSS 6.4 (medium), 2024-10-01: The QS Dark Mode Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 2.9 due…
- CVE-2024-5152 - CVSS 6.4 (medium), 2024-06-06: The ElementsReady Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘_id’ parameter in all versions up to, and…
- CVE-2024-34374 - CVSS 6.5 (medium), 2024-05-06: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuomodoSoft ElementsReady Addons for Elementor allows…
