Vendor

    QuadLayers

    20 known vulnerabilities in products by QuadLayers, 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in QuadLayers
    MediumCVE-2023-47681

    WordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability

    6.5
    CriticalCVE-2021-4443

    WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation

    9.8
    HighCVE-2026-17031

    QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Missing Authorization

    8.1
    HighCVE-2019-15779

    QuadLayers WP Social Feed Gallery: security vulnerability

    8.8
    MediumCVE-2026-114705

    WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability

    6.5
    MediumCVE-2026-18404

    QuadLayers Social Chat: Cross-site Scripting

    6.4
    HighCVE-2022-23982

    WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability

    4.3
    HighCVE-2025-58686

    WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability

    8.5
    MediumCVE-2025-13930

    QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Missing Authorization

    5.3
    MediumCVE-2024-39640

    WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability

    6.5
    MediumCVE-2025-12500

    QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Unrestricted Upload of File with Dangerous Type

    5.3
    MediumCVE-2025-10144

    Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection

    6.5
    MediumCVE-2022-2361

    Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting

    4.8
    MediumCVE-2025-10637

    Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure

    5.3
    MediumCVE-2025-2821

    Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification

    5.3
    MediumCVE-2022-23981

    WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability

    4.3
    MediumCVE-2025-63016

    WordPress QuadLayers TikTok Feed plugin <= 4.6.5 - Broken Access Control vulnerability

    5.3
    MediumCVE-2025-62116

    WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability

    5.3
    MediumCVE-2025-10646

    QuadLayers Search Exclude: Missing Authorization

    4.3
    MediumCVE-2025-2871

    WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Update

    4.3

    Products