Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

16 records

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00174 Published 2026-03-05 No fix listed CWE-79
Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Stored XSS.This issue affects Cost Calculator: from n/a through…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2025-08-20 No fix listed CWE-79
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids allows Reflected XSS.This issue a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00276 Published 2025-07-16 No fix listed CWE-79
Priority LOW 20

Missing Authorization vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cost Calculator: from n/a through <= 7.4.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00232 Published 2025-07-16 No fix listed CWE-862
Priority LOW 39

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuanticaLabs GymBase Theme Classes gymbase_classes allows SQL Injection.This issue affects GymBase Theme Classes: from…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00313 Published 2025-07-16 No fix listed CWE-89
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Vertical Web Pricing Tables css3_vertical_web_pricing_tables allows Reflected XSS.This issue affects…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-06-27 No fix listed CWE-79
Priority LOW 20

Missing Authorization vulnerability in QuanticaLabs Car Park Booking System for WordPress car-park-booking-system-for-wordpress.This issue affects Car Park Booking System for WordPress: from n/a through <= 2.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00243 Published 2025-05-19 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Accordions for WordPress:…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00334 Published 2025-05-16 No fix listed CWE-862
Priority LOW 24

Missing Authorization vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00363 Published 2025-05-16 No fix listed CWE-862
Priority LOW 30

Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MediCenter - Health Medical Cli…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00285 Published 2025-02-18 No fix listed CWE-862
Priority LOW 36

Missing Authorization vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chauffeur Taxi Booking System for WordPre…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00361 Published 2024-05-17 No fix listed CWE-862
Priority MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a through 7.2.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00631 Published 2024-03-31 No fix listed CWE-434