Skip to content
OpenAdvisories

Vendor

QuantumCloud

75 known vulnerabilities.

Products

WPBot – AI ChatBot for Live Support, Lead Generation, AI Services 16 Simple Link Directory 11 ChatBot 8 Conversational Forms for ChatBot 6 AI ChatBot 5 WPBot Pro Wordpress Chatbot 5 Simple Business Directory Pro 4 Slider Hero with Video Background, Animation 2 AI Infographic Maker 2 KBx Pro Ultimate 2 Simple Link Directory Pro 2 SEO Help 2 iChart – Easy Charts and Graphs 1 Floating Buttons for WooCommerce 1 QC SEO Help for llms.txt, AI Analytics, AI Content Writer, Subtitle to Article 1 Highlight 1 ChatBot with AI 1 WoowBot Pro Max 1 Floating Action Buttons 1 ChatBot for eCommerce – WoowBot 1 Infographic Maker – iList 1 AI ChatBot for WooCommerce – WoowBot 1
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • High 8.8
    CVE-2026-95531

    WordPress Conversational Forms for ChatBot plugin <= 1.5.0 - PHP Object Injection vulnerability

    Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.

    QuantumCloud Conversational Forms for ChatBot
  • High 7.2
    CVE-2026-83593

    WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

    The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient input sanitization and out…

    QuantumCloud WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Web / CMS
  • High 7.2
    CVE-2026-61953

    WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability

    Unauthenticated Server Side Request Forgery (SSRF) in Simple Link Directory Pro <= 15.0.6 versions.

    QuantumCloud Simple Link Directory Pro
  • High 7.1
    CVE-2026-57363

    WordPress ChatBot plugin <= 8.3.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuantumCloud ChatBot chatbot allows Stored XSS.This issue affects ChatBot: from n/a through <= 8.3.7.

    QuantumCloud ChatBot
  • High 7.1
    CVE-2026-57682

    WordPress Simple Link Directory plugin <= 15.0.5 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Simple Link Directory <= 15.0.5 versions.

    QuantumCloud Simple Link Directory
  • High 7.1
    CVE-2026-57362

    WordPress ChatBot plugin <= 8.3.2 - Reflected Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in ChatBot <= 8.3.2 versions.

    QuantumCloud ChatBot
  • High 7.2
    CVE-2026-13731

    WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

    The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.4.9 due to insufficient input sanitization and out…

    QuantumCloud WPBot – AI ChatBot for Live Support, Lead Generation, AI Services Web / CMS
  • High 7.5
    CVE-2024-32729

    WordPress ChatBot Conversational Forms plugin <= 1.1.8 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QuantumCloud Conversational Forms for ChatBot allows Path Traversal. This issue affects Conversational Forms for ChatBot: from n/a through 1.1.8.

    QuantumCloud Conversational Forms for ChatBot
  • High 7.7
    CVE-2025-60223

    WordPress WPBot Pro Wordpress Chatbot plugin <= 13.6.5 - Arbitrary File Deletion vulnerability

    Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot <= 13.6.5 versions.

    QuantumCloud WPBot Pro Wordpress Chatbot Web / CMS
  • High 7.1
    CVE-2026-40788

    WordPress ChatBot plugin <= 7.9.7 - Broken Access Control vulnerability

    Subscriber Broken Access Control in ChatBot <= 7.9.7 versions.

    QuantumCloud ChatBot
  • High 7.1
    CVE-2025-48162

    WordPress Simple Business Directory Pro <= 15.5.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quantumcloud Simple Business Directory Pro simple-business-directory-pro allows Reflected XSS.This issue affects Simple Business Directory Pro: from n/a thro…

    QuantumCloud Simple Business Directory Pro
  • High 7.1
    CVE-2025-48297

    WordPress Simple Link Directory < 14.8.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Reflected XSS.This issue affects Simple Link Directory: from n/a through < 14.8.1.

    QuantumCloud Simple Link Directory
  • High 8.5
    CVE-2025-32297

    WordPress Simple Link Directory Pro plugin < 14.8.1 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows SQL Injection.This issue affects Simple Link Directory: from n/a through < 14.8.1.

    QuantumCloud Simple Link Directory
  • High 7.7
    CVE-2025-31053

    WordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Path Traversal.This issue affects KBx Pro Ultimate: from n/a through < 8.0.5.

    QuantumCloud KBx Pro Ultimate
  • High 8.1
    CVE-2025-3812

    WPBot Pro Wordpress Chatbot <= 13.6.2 - Authenticated (Subscriber+) Arbitrary File Deletion

    The WPBot Pro Wordpress Chatbot plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the qcld_openai_delete_training_file() function in all versions up to, and including, 13.6.2. This makes it possible for …

    QuantumCloud WPBot Pro Wordpress Chatbot Web / CMS
  • High 7.5
    CVE-2025-26932

    WordPress WPBot plugin <= 6.3.5 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in QuantumCloud ChatBot chatbot allows PHP Local File Inclusion.This issue affects ChatBot: from n/a through <= 6.3.5.

    QuantumCloud ChatBot
  • High 8.7
    CVE-2024-22309

    WordPress ChatBot Plugin <= 5.1.0 is vulnerable to PHP Object Injection

    Deserialization of Untrusted Data vulnerability in QuantumCloud ChatBot with AI.This issue affects ChatBot with AI: from n/a through 5.1.0.

    QuantumCloud ChatBot with AI
  • High 7.6
    CVE-2023-48741

    WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuantumCloud AI ChatBot.This issue affects AI ChatBot: from n/a through 4.7.8.

    QuantumCloud AI ChatBot