Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

quadlayers vulnerabilities

18 published CVEs name quadlayers among the affected products.

Atom feed of new CVEs

Newest CVEs

  • CVE-2026-114705

    WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability

    quadlayers · WP Social Feed Gallery

    Medium6.5
  • CVE-2026-17031

    Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.9.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Media Deletion via Checkout File Field Attachment ID

    quadlayers · Checkout Field Manager (Checkout Manager) for WooCommerce

    High8.1
  • CVE-2026-18404

    Social Chat <= 8.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box

    quadlayers · Social Chat – Click To Chat App Button

    Medium6.4
  • CVE-2025-13930

    Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

    quadlayers · Checkout Field Manager (Checkout Manager) for WooCommerce

    Medium5.3
  • CVE-2025-12500

    Checkout Field Manager (Checkout Manager) for WooCommerce <= 7.8.1 - Unauthenticated Limited File Upload

    quadlayers · Checkout Field Manager (Checkout Manager) for WooCommerce

    Medium5.3
  • CVE-2025-62116

    WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability

    quadlayers · AI Copilot

    Medium5.3
  • CVE-2025-63016

    WordPress QuadLayers TikTok Feed plugin <= 4.6.5 - Broken Access Control vulnerability

    quadlayers · QuadLayers TikTok Feed

    Medium5.3
  • CVE-2025-10646

    Search Exclude <= 2.5.7 – Missing Authorization to Authenticated (Contributor+) Search Settings Modification via REST API

    quadlayers · Search Exclude

    Medium4.3
  • CVE-2025-10144

    Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection

    quadlayers · Perfect Brands for WooCommerce

    Medium6.5
  • CVE-2025-10637

    Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure

    quadlayers · Social Feed Gallery

    Medium5.3
All 18 in the list