Skip to content
OpenAdvisories

Vendor

ajitdas

6 known vulnerabilities.

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-12673 Public exploit

    Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

    The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to u…

  • Critical 9.8
    CVE-2025-10041 Public exploit

    Flex QR Code Generator <= 1.2.5 - Unauthenticated Arbitrary File Upload

    The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers t…