Log in Start free

QuantumCloud

Products

ProductCVEsExploitedLatest
WPBot – AI ChatBot for Live Support, Lead Generation, AI Services16–Sep 9, 2026
Simple Link Directory11–Jul 2, 2026
ChatBot8–Jul 13, 2026
Conversational Forms for ChatBot6–Oct 18, 2026
AI ChatBot5–Dec 19, 2023
WPBot Pro Wordpress Chatbot5–Jun 17, 2026
Simple Business Directory Pro4–Jul 13, 2026
AI Infographic Maker2–Jan 31, 2025
Simple Link Directory Pro2–Jul 27, 2026
Slider Hero with Video Background, Animation2–Aug 16, 2026
KBx Pro Ultimate2–Oct 22, 2025
SEO Help2–Apr 10, 2025
QC SEO Help for llms.txt, AI Analytics, AI Content Writer, Subtitle to Article1–Dec 12, 2024
WoowBot Pro Max1–Jul 13, 2026
AI ChatBot for WooCommerce – WoowBot1–Oct 28, 2026
ChatBot for eCommerce – WoowBot1–Jul 13, 2026
ChatBot with AI1–Jan 24, 2024
Floating Action Buttons1–Jan 2, 2025
Floating Buttons for WooCommerce1–Nov 19, 2024
Highlight1–Jan 7, 2025
iChart – Easy Charts and Graphs1–Dec 10, 2024
Infographic Maker – iList1–Apr 22, 2024

Exploited and recent CVEs

  • CVE-2026-111372 Medium 4.3 AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action 0.3%
  • CVE-2026-110886 Critical 9.8 WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability 0.3%
  • CVE-2026-95531 High 8.8 WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-83593 High 7.2 WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter 0.5%
  • CVE-2026-17582 Medium 4.9 Slider Hero with Video Background, Animation <= 9.1.7 - Authenticated (Administrator+) SQL Injection via 'description' Slide Field (Second-Order via Duplicate) 0.5%
  • CVE-2026-16773 Medium 5.3 WPBot <= 8.5.9 - Unauthenticated Sensitive Information Exposure in 'wpbot_send_email_transcript' AJAX Action 0.5%
  • CVE-2026-16774 Medium 5.3 WPBot <= 8.5.9 - Missing Authorization to Unauthenticated Email Relay via wpcs_send_email AJAX Action 0.4%
  • CVE-2026-61953 High 7.2 WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability 0.3%
  • CVE-2026-61981 Medium 5.4 WordPress Simple Link Directory Pro plugin <= 15.0.8 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2026-15610 Medium 4.3 WPBot <= 8.5.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary RAG Document Re-Sync via ajax_rag_manual_sync() Function 0.4%
  • CVE-2026-15106 Medium 5.3 WPBot <= 8.5.6 - Missing Authorization to Unauthenticated Arbitrary Chat Session Deletion via 'userid' Parameter 0.5%
  • CVE-2026-57710 Critical 9.9 WordPress WoowBot Pro Max plugin <= 14.1.7 - Arbitrary File Upload vulnerability 0.5%
  • CVE-2026-57707 Critical 9.3 WordPress Simple Business Directory Pro plugin <= 15.9.4 - SQL Injection vulnerability 0.4%
  • CVE-2026-57414 Medium 6.5 WordPress ChatBot for eCommerce – WoowBot plugin <= 4.6.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57363 High 7.1 WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57682 High 7.1 WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57362 High 7.1 WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-13731 High 7.2 WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter 0.9%
  • CVE-2024-32729 High 7.5 WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability 0.4%
  • CVE-2025-60223 High 7.7 WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability 0.4%
  • CVE-2026-40788 High 7.1 WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability 0.3%
  • CVE-2026-53742 Medium 5.4 Simple Link Directory through 9.0.4 Stored XSS via Embed Shortcode Attributes 0.1%
  • CVE-2026-53741 Medium 5.4 Simple Link Directory through 9.0.4 Stored XSS via sld_no_results_found Option 0.1%
  • CVE-2026-7209 Medium 6.4 Simple Link Directory <= 8.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes 0.2%
  • CVE-2026-32499 Critical 9.3 WordPress ChatBot plugin <= 7.7.9 - SQL Injection vulnerability 0.3%
  • CVE-2025-67576 Medium 5.3 WordPress Simple Link Directory plugin <= 8.8.3 - Broken Access Control vulnerability 0.3%
  • CVE-2025-67465 Medium 4.3 WordPress Simple Link Directory plugin <= 8.8.3 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
  • CVE-2025-64277 Medium 5.3 WordPress ChatBot plugin <= 7.3.9 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62952 Medium 4.3 WordPress ChatBot plugin <= 7.7.3 - Broken Access Control vulnerability 0.2%
  • CVE-2025-60232 Critical 9.8 WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerability 0.6%