Vulnerabilities

TI-2026-03590 CVE-2026-4141 · GHSA-jpg5-qfwx-chrw

Quran Translations <= 1.7 - Cross-Site Request Forgery to Playlist Settings Form

LOW 19

The Quran Translations plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00166 Published 2026-04-08 No fix listed CWE-352

TI-2025-12944 CVE-2025-14164 · GHSA-226h-cxv5-p8qg

Quran Gateway <= 1.5 - Cross-Site Request Forgery to Settings Update

LOW 19

The Quran Gateway plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00151 Published 2025-12-20 No fix listed CWE-352

TI-2024-34539 CVE-2024-51625 · GHSA-jp5r-27hh-r6c3

WordPress Quran Shortcode plugin <= 1.5 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in edckwt Quran Shortcode quran-shortcode allows Blind SQL Injection.This issue affects Quran Shortcode: from n/a through…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00395 Published 2024-11-09 No fix listed CWE-89

Vulnerabilities

Filters

Quran Translations <= 1.7 - Cross-Site Request Forgery to Playlist Settings Form

Quran Gateway <= 1.5 - Cross-Site Request Forgery to Settings Update

WordPress Quran Shortcode plugin <= 1.5 - SQL Injection vulnerability