Lucene search
+L

199 matches found

Positive Technologies
Positive Technologies
•added 2025/04/09 12:00 a.m.•15 views

PT-2025-15819 · Unknown · Quantumcloud Seo Help

Name of the Vulnerable Software and Affected Versions: QuantumCloud SEO Help versions n/a through 6.6.0 Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability, which allows for Server Side Request Forgery. Recommendations: For versions n/a through 6.6.0, update to a...

6.8CVSS7.1AI score0.00463EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/09 12:00 a.m.•7 views

CVE-2025-32675: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in QuantumCloud SEO Help seo-help allows Server Side Request Forgery.This issue affects SEO Help: from n/a through = 6.7.9...

6.8CVSS5.8AI score0.00463EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/27 2:28 p.m.•20 views

CVE-2025-26932

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through = 6.3.5...

7.5CVSS7.2AI score0.0077EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/25 3:15 p.m.•30 views

CVE-2025-26932

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through = 6.3.5...

7.5CVSS0.0077EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/25 2:17 p.m.•11 views

CVE-2025-26932 WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through = 6.3.5...

7.5CVSS8.7AI score0.0077EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/25 2:17 p.m.•40 views

CVE-2025-26932 WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through = 6.3.5...

7.5CVSS0.0077EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/25 2:17 p.m.•76 views

CVE-2025-26932

CVE-2025-26932 affects WPBot (WordPress WPBot ChatBot). The vulnerability is an authenticated Local File Inclusion (LFI) due to improper control of include/require statements. Affected versions are ChatBot up to 6.3.5. Patch status: Patched in the available update.

7.5CVSS7.2AI score0.0077EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/02/25 12:00 a.m.•19 views

PT-2025-7853 · Unknown · Quantumcloud Chatbot

Name of the Vulnerable Software and Affected Versions: QuantumCloud ChatBot versions n/a through 6.3.5 Description: The issue is related to an Improper Control of Filename for Include/Require Statement in PHP Program, also known as 'PHP Remote File Inclusion' vulnerability, which allows PHP Local...

7.5CVSS9.6AI score0.0077EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•10 views

CVE-2025-26932: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through = 6.3.5...

7.5CVSS5.8AI score0.0077EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 11:40 p.m.•18 views

CVE-2024-22309

Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0...

9.8CVSS8.6AI score0.00519EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•9 views

CVE-2025-22813: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through = 1.4.2...

6.5CVSS5.8AI score0.00237EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•8 views

CVE-2024-56297: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud Highlight highlight allows Stored XSS.This issue affects Highlight: from n/a through = 2.0.2...

5.9CVSS5.8AI score0.00319EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/02 12:01 p.m.•38 views

CVE-2024-56238 WordPress Floating Action Buttons plugin <= 0.9.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Floating Action Buttons: from n/a through = 0.9.1...

5.3CVSS0.00493EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/02 12:00 a.m.•19 views

PT-2025-3204 · Unknown · Qunatumcloud Floating Action Buttons

Name of the Vulnerable Software and Affected Versions: QunatumCloud Floating Action Buttons versions 0.9.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows accessing functionality not properly constrained by ACLs. Recommendations: For QunatumClo...

5.3CVSS9.4AI score0.00493EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/02 12:00 a.m.•6 views

CVE-2024-56238: Missing Authorization

Missing Authorization vulnerability in QuantumCloud Floating Action Buttons floating-action-buttons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Floating Action Buttons: from n/a through = 0.9.1...

5.3CVSS5.8AI score0.00493EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 5:15 p.m.•27 views

CVE-2024-52395

Missing Authorization vulnerability in QuantumCloud Floating Buttons for WooCommerce shop-assistant-for-woocommerce-jarvis allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Floating Buttons for WooCommerce: from n/a through = 2.8.8...

5.3CVSS0.00418EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 4:30 p.m.•33 views

CVE-2024-52395 WordPress Floating Buttons for WooCommerce plugin <= 2.8.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in QuantumCloud Floating Buttons for WooCommerce shop-assistant-for-woocommerce-jarvis allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Floating Buttons for WooCommerce: from n/a through = 2.8.8...

5.3CVSS0.00418EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/19 4:30 p.m.•84 views

CVE-2024-52395

CVE-2024-52395 describes a Missing Authorization vulnerability in the WordPress plugin “Floating Buttons for WooCommerce” (also listed as shop-assistant-for-woocommerce-jarvis) that allows broken access control on the plugin’s features. Affected versions are up to 2.8.8. The published data indica...

5.3CVSS7.2AI score0.00418EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•5 views

CVE-2024-52395: Missing Authorization

Missing Authorization vulnerability in QuantumCloud Floating Buttons for WooCommerce shop-assistant-for-woocommerce-jarvis allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Floating Buttons for WooCommerce: from n/a through = 2.8.8...

5.3CVSS5.9AI score0.00418EPSS
SaveExploits0References1
NVD
NVD
•added 2024/05/06 7:15 p.m.•47 views

CVE-2024-34380

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in QuantumCloud Conversational Forms for ChatBot allows Stored XSS.This issue affects Conversational Forms for ChatBot: from n/a through 1.2.0...

6.5CVSS6.1AI score0.00351EPSS
SaveExploits0References1
Rows per page
Query Builder