WordPress-Flex-QR-Code-Generator---CVE-2025-10041

CVE-2025-10041: Arbitrary File Upload Vulnerability Analysis in the Flex QR Code Generator Plugin 1. Vulnerability Overview Plugin Name : Flex QR Code Generator Affected Versions : ≤ 1.2.5 all versions Vulnerability Type : Arbitrary File Upload → Remote Code Execution RCE Exploitation Conditions ...

CVE-2022-24992

CVE-2022-24992 CVE-2022–24992 This post is about CVE-2022–24992 my first CVE, which refers to a vulnerability in QRCDR's widely used QR-Code generator script. more info Best, n0lsec...

CVE-2026-116867

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

CVE-2026-116867

The WordPress Dynamic QR Code – generator plugin versions

CVE-2026-116867 WordPress Dynamic QR Code – generator plugin <= 1.0.1 - PHP Object Injection vulnerability

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

EUVD-2026-112987

Contributor PHP Object Injection in Dynamic QR Code generator = 1.0.1 versions...

CVE-2026-51907

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

PT-2026-104367

In TaskingAI v0.3.0 in the QR Code Generator plugin save base64 image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the project id parameter...

CVE-2026-51907

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

EUVD-2026-91700

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

CVE-2026-51907

A path traversal vulnerability exists in TaskingAI v0.3.0 within the QR Code Generator plugin . Specifically, the save_base64_image function fails to properly sanitize the project_id parameter, allowing an attacker to write image files to arbitrary locations on the server filesystem. While exploi...

CVE-2026-51907: Improper Limitation of a Pathname to a Restricted Directory

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

CVE-2026-51907

In TaskingAI v0.3.0 in the QR Code Generator plugin savebase64image function, a path traversal vulnerability allows attackers to write image files to arbitrary locations on the server filesystem by manipulating the projectid parameter...

CVE-2026-24614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.10...

CVE-2026-24614

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.10...

CVE-2026-24614

CVE-2026-24614 affects the WordPress plugin Flex QR Code Generator (flex-qr-code-generator). The vulnerability is a DOM-based XSS caused by improper neutralization during web page generation. Public references indicate impact on Flex QR Code Generator versions up to 1.2.8 (NVD/Red Hat) with Patch...

CVE-2026-24614 WordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.10...

WordPress plugin Flex QR Code Generator has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. The...

CVE-2026-24614: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Devsbrain Flex QR Code Generator flex-qr-code-generator allows DOM-Based XSS.This issue affects Flex QR Code Generator: from n/a through = 1.2.10...

WordPress Flex QR Code Generator plugin <= 1.2.10 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jitlada in WordPress Plugin Flex QR Code Generator versions = 1.2.10...