QuomodoSoft

Products

ProductCVEsExploitedLatest
ElementsReady Addons for Elementor9–Apr 16, 2025
QS Dark Mode1–May 7, 2025
QS Dark Mode Plugin1–Oct 1, 2024
Shopready1–Nov 28, 2024

Exploited and recent CVEs

  • CVE-2025-47628 Medium 5.4 WordPress QS Dark Mode plugin <= 3.0 - Broken Access Control Vulnerability 0.4%
  • CVE-2025-39546 Medium 4.3 WordPress ElementsReady Addons for Elementor plugin <= 6.6.2 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%
  • CVE-2024-10356 Medium 4.3 ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates 0.4%
  • CVE-2024-54224 Medium 6.5 WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-52497 High 7.5 WordPress Shopready plugin <= 3.6 - Local File Inclusion vulnerability 0.7%
  • CVE-2024-51787 Medium 6.5 WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9444 Medium 6.4 ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-47353 Medium 4.7 WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerability 0.3%
  • CVE-2024-47329 Medium 6.5 WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-9118 Medium 6.4 QS Dark Mode Plugin <= 2.9 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
  • CVE-2024-5152 Medium 6.4 ElementsReady Addons for Elementor <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-34374 Medium 6.5 WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability 0.3%