Metodiew Quote Comments vulnerabilities

• metodiew quote comments Quote Comments <= 3.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Settings Update CVE-2025-14370 4.3 MediumJanuary 7, 2026
• metodiew quote comments WordPress Quote Comments plugin <= 3.0.0 - CSRF to Stored XSS vulnerability CVE-2025-25156 7.1 HighFebruary 7, 2025