Quantumcloud vulnerabilities
93 vulnerabilities
Known vulnerabilities in Quantumcloud products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 27 products.
Products
27- Wpbot27 vulnerabilities
- Wpbot – AI Chatbot For Live Support, Lead Generation, AI Services16 vulnerabilities
- Simple Link Directory13 vulnerabilities
- Chatbot9 vulnerabilities
- AI Chatbot5 vulnerabilities
- Conversational Forms For Chatbot5 vulnerabilities
- Wpbot Pro Wordpress Chatbot5 vulnerabilities
- Simple Business Directory Pro4 vulnerabilities
- Slider Hero3 vulnerabilities
- AI Infographic Maker2 vulnerabilities
- Kbx Pro Ultimate2 vulnerabilities
- SEO Help2 vulnerabilities
- Simple Link Directory Pro2 vulnerabilities
- Simple Video Directory2 vulnerabilities
- Slider Hero With Video Background, Animation2 vulnerabilities
- Chatbot For Ecommerce – Woowbot1 vulnerabilities
- Chatbot With AI1 vulnerabilities
- Comment Link Remove And Other Comment Tools1 vulnerabilities
- Floating Action Buttons1 vulnerabilities
- Floating Buttons For Woocommerce1 vulnerabilities
- Highlight1 vulnerabilities
- Ichart – Easy Charts And Graphs1 vulnerabilities
- Infographic Maker1 vulnerabilities
- Infographic Maker – Ilist1 vulnerabilities
- QC SEO Help For Llms.Txt, AI Analytics, AI Content Writer, Subtitle To Article1 vulnerabilities
- Woowbot Pro Max1 vulnerabilities
- Wpot1 vulnerabilities
CVE-2026-110886quantumcloudconversational forms for chatbotDeserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1.CVE-2021-4424quantumcloudslider_hero+2
EPSS score0.39%
The Slider Hero plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.2.0. This is due to missing or incorrect nonce validation on the qc_slider_hero_duplicate() function. This makes it possible for unauthenticated attackers to duplicate slides via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.CVE-2021-24725quantumcloudcomment_link_remove_and_other_comment_tools+2EPSS score0.49%
The Comment Link Remove and Other Comment Tools WordPress plugin before 2.1.6 does not have CSRF check in its 'Delete comments easily', which could allow attackers to make logged in admin delete arbitrary commentsCVE-2021-24506quantumcloudslider_hero+2EPSS score1.36%
The Slider Hero with Animation, Video Background & Intro Maker WordPress plugin before 8.2.7 does not sanitise or escape the id attribute of its hero-button shortcode before using it in a SQL statement, allowing users with a role as low as Contributor to perform SQL injection.CVE-2025-62952quantumcloudchatbot+1EPSS score0.24%
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.7.3.CVE-2025-26932quantumcloudchatbot+1EPSS score0.77%
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through <= 6.3.5.CVE-2025-47582quantumcloudwpbot pro wordpress chatbot+1EPSS score0.60%
Deserialization of Untrusted Data vulnerability in QuantumCloud WPBot Pro Wordpress Chatbot allows Object Injection.This issue affects WPBot Pro Wordpress Chatbot: from n/a through 12.7.0.CVE-2025-48162quantumcloudsimple business directory pro+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Reflected XSS.This issue affects Simple Business Directory Pro: from n/a through <= 15.5.1.CVE-2025-48297quantumcloudsimple_link_directory+1EPSS score0.23%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Reflected XSS.This issue affects Simple Link Directory: from n/a through < 14.8.1.CVE-2025-0329quantumcloudwpbot+2EPSS score0.27%
The AI ChatBot for WordPress WordPress plugin before 6.2.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).CVE-2025-9111quantumcloudwpbot+2EPSS score0.26%
The AI ChatBot for WordPress WordPress plugin before 7.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).CVE-2025-31053quantumcloudkbx pro ultimate+1EPSS score0.53%
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Path Traversal.This issue affects KBx Pro Ultimate: from n/a through < 8.0.5.CVE-2025-31918quantumcloudsimple business directory pro+1EPSS score0.49%
Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through < 15.6.9.CVE-2025-53580quantumcloudsimple business directory pro+1EPSS score0.37%
Incorrect Privilege Assignment vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Privilege Escalation.This issue affects Simple Business Directory Pro: from n/a through < 15.6.9.CVE-2025-53200quantumcloudchatbot+1EPSS score0.27%
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 6.7.3.CVE-2025-67576quantumcloudsimple_link_directory+1EPSS score0.27%
Missing Authorization vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Link Directory: from n/a through <= 8.8.3.CVE-2025-67465quantumcloudsimple_link_directory+1EPSS score0.13%
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud Simple Link Directory simple-link-directory allows Cross Site Request Forgery.This issue affects Simple Link Directory: from n/a through <= 8.8.3.CVE-2025-22813quantumcloudconversational forms for chatbot+1EPSS score0.24%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through <= 1.4.2.CVE-2025-64277quantumcloudchatbot+1EPSS score0.29%
Missing Authorization vulnerability in QuantumCloud ChatBot chatbot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ChatBot: from n/a through <= 7.3.9.CVE-2025-49901quantumcloudsimple_link_directory+1EPSS score0.73%
Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.