Quadlayers
15 CVEs across 13 Quadlayers products. Browse Quadlayers vulnerabilities, severities, and proof-of-concept exploits.
Quadlayers products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-13930 | Medium | 5.3 | 2026-02-19 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 7.8… |
CVE-2025-12500 | Medium | 5.3 | 2026-02-19 | The Checkout Field Manager (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to unauthenticated limited file upload in all versions up to… |
CVE-2025-62116 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe… |
CVE-2025-63016 | Medium | 5.3 | 2025-12-31 | Missing Authorization vulnerability in quadlayers QuadLayers TikTok Feed wp-tiktok-feed allows Exploiting Incorrectly Configured Access Control Security Levels… |
CVE-2025-10646 | Medium | 4.3 | 2025-11-25 | The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a insufficient capability check on the Base::get_rest_permiss… |
CVE-2025-10144 | Medium | 6.5 | 2025-11-24 | The Perfect Brands for WooCommerce plugin for WordPress is vulnerable to time-based SQL Injection via the `brands` attribute of the `products` shortcode in all… |
CVE-2025-10637 | Medium | 5.3 | 2025-10-25 | The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not pro… |
CVE-2025-58686 | High | 8.5 | 2025-09-22 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in quadlayers Perfect Brands for WooCommerce perfect-woocomm… |
CVE-2025-2821 | Medium | 5.3 | 2025-05-07 | The Search Exclude plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the get_rest_permission functio… |
CVE-2025-2871 | Medium | 4.3 | 2025-04-12 | The WordPress Mega Menu – QuadMenu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.2.0. This is due to… |
CVE-2024-39640 | Medium | 6.5 | 2024-11-01 | Missing Authorization vulnerability in QuadLayers WP Social Feed Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2021-4443 | Critical | 9.8 | 2024-10-16 | The WordPress Mega Menu plugin for WordPress is vulnerable to Arbitrary File Creation in versions up to, and including, 2.0.6 via the compiler_save AJAX action… |
CVE-2023-47681 | Medium | 6.5 | 2024-06-19 | Missing Authorization vulnerability in QuadLayers WooCommerce Checkout Manager.This issue affects WooCommerce Checkout Manager: from n/a through 7.3.0. |
CVE-2022-2361 | Medium | 4.8 | 2022-08-22 | The WP Social Chat WordPress plugin before 6.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per… |
CVE-2022-23982 | Medium | 4.3 | 2022-02-18 | The vulnerability discovered in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4) allows server information exposure. |
CVE-2022-23981 | Medium | 4.3 | 2022-02-18 | The vulnerability allows Subscriber+ level users to create brands in WordPress Perfect Brands for WooCommerce plugin (versions <= 2.0.4). |
CVE-2019-15779 | High | 8.8 | 2019-08-29 | The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete. |