Quadlayers vulnerabilities

Products

• Checkout Field Manager (checkout Manager) For Woocommerce 5
• Ai Copilot 2
• Perfect Brands For Woocommerce 2
• Perfect Brands For Woocommerce 2
• Perfect Brands For Woocommerce (wordpress Plugin) 2
• Quadmenu – Mega Menu 2
• Search Exclude 2
• Wp Social Feed Gallery 2
• Wp Social Feed Gallery 2

Newest

• quadlayers wp social feed gallery WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability CVE-2026-114705 6.5 MediumOctober 24, 2026
• quadlayers checkout field manager (checkout manager) for woocommerce Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID CVE-2026-17031 8.1 HighOctober 15, 2026
• quadlayers checkout field manager (checkout manager) for woocommerce Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Customer Address Custom Field CVE-2026-87831 4.3 MediumSeptember 17, 2026
• quadlayers checkout field manager (checkout manager) for woocommerce Checkout Field Manager < 7.9.7 - Subscriber+ Arbitrary Attachment Deletion via Unvalidated Attachment ID Reparenting CVE-2026-87829 4.3 MediumSeptember 17, 2026
• quadlayers social chat – click to chat app button Social Chat <= 8.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box CVE-2026-18404 6.4 MediumSeptember 5, 2026
• quadlayers ai copilot AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuth CVE-2026-9810 9.8 CriticalJuly 17, 2026
• quadlayers checkout field manager (checkout manager) for woocommerce Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion CVE-2025-13930 5.3 MediumFebruary 19, 2026
• quadlayers checkout field manager (checkout manager) for woocommerce Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload CVE-2025-12500 5.3 MediumFebruary 19, 2026
• quadlayers ai copilot WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability CVE-2025-62116 5.3 MediumDecember 31, 2025
• quadlayers tiktok feed WordPress QuadLayers TikTok Feed plugin <= 4.6.5 - Broken Access Control vulnerability CVE-2025-63016 5.3 MediumDecember 31, 2025
• quadlayers search exclude Search Exclude <= 2.5.7 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API CVE-2025-10646 4.3 MediumNovember 25, 2025
• quadlayers perfect brands for woocommerce Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection CVE-2025-10144 6.5 MediumNovember 24, 2025
• quadlayers social feed gallery Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure CVE-2025-10637 5.3 MediumOctober 25, 2025
• quadlayers perfect brands for woocommerce WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability CVE-2025-58686 8.5 HighSeptember 22, 2025
• quadlayers search exclude Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification CVE-2025-2821 5.3 MediumMay 7, 2025
• quadlayers quadmenu – mega menu WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Update CVE-2025-2871 4.3 MediumApril 12, 2025
• quadlayers wp social feed gallery WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability CVE-2024-39640 6.5 MediumNovember 1, 2024
• quadlayers quadmenu – mega menu, wordpress mega menu-quadmenu +1 more WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation CVE-2021-4443 9.8 CriticalOctober 16, 2024
• quadlayers checkout manager, woocommerce checkout manager +1 more WordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability CVE-2023-47681 6.5 MediumJune 19, 2024
• quadlayers wp social chat, unknown wp social chat – click to chat app +1 more Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting CVE-2022-2361 4.8 MediumAugust 22, 2022
• quadlayers perfect brands for woocommerce, perfect brands for woocommerce (wordpress plugin) +1 more WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability CVE-2022-23982 4.3 MediumFebruary 18, 2022
• quadlayers perfect brands for woocommerce, perfect brands for woocommerce (wordpress plugin) +1 more WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability CVE-2022-23981 4.3 MediumFebruary 18, 2022
• quadlayers wp social feed gallery The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for... CVE-2019-15779 8.8 HighAugust 29, 2019