Log in Start free

QuadLayers

Products

ProductCVEsExploitedLatest
Checkout Field Manager (Checkout Manager) for WooCommerce3–Oct 15, 2026
Perfect Brands for WooCommerce2–Nov 24, 2025
Perfect Brands for WooCommerce (WordPress plugin)2–Feb 18, 2022
WP Social Feed Gallery2–Oct 24, 2026
QuadMenu – Mega Menu2–Apr 12, 2025
Search Exclude2–Nov 25, 2025
AI Copilot1–Dec 31, 2025
Social Chat – Click To Chat App Button1–Sep 5, 2026
Social Feed Gallery1–Oct 25, 2025
QuadLayers TikTok Feed1–Dec 31, 2025
WooCommerce Checkout Manager1–Jun 19, 2024

Exploited and recent CVEs

  • CVE-2026-114705 Medium 6.5 WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability 0.2%
  • CVE-2026-17031 High 8.1 Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID 0.3%
  • CVE-2026-18404 Medium 6.4 Social Chat <= 8.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box 0.3%
  • CVE-2025-13930 Medium 5.3 Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion 0.5%
  • CVE-2025-12500 Medium 5.3 Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload 0.4%
  • CVE-2025-62116 Medium 5.3 WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability 0.2%
  • CVE-2025-63016 Medium 5.3 WordPress QuadLayers TikTok Feed plugin <= 4.6.5 - Broken Access Control vulnerability 0.2%
  • CVE-2025-10646 Medium 4.3 Search Exclude <= 2.5.7 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API 0.2%
  • CVE-2025-10144 Medium 6.5 Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection 0.3%
  • CVE-2025-10637 Medium 5.3 Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure 0.3%
  • CVE-2025-58686 High 8.5 WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability 0.3%
  • CVE-2025-2821 Medium 5.3 Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification 0.4%
  • CVE-2025-2871 Medium 4.3 WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Update 0.2%
  • CVE-2024-39640 Medium 6.5 WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability 0.4%
  • CVE-2021-4443 Critical 9.8 WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation 0.7%
  • CVE-2023-47681 Medium 6.5 WordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability 9.2%
  • CVE-2022-23982 Medium 4.3 WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability 1.2%
  • CVE-2022-23981 Medium 4.3 WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability 0.6%