Vendor
QuadLayers
20 known vulnerabilities in products by QuadLayers, 0 of them actively exploited (CISA KEV).
Key figures
20
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Medium | CVE-2023-47681 | WordPress WooCommerce Checkout Manager plugin <= 7.3.0 - Broken Access Control vulnerability | 6.5 | |
| Critical | CVE-2021-4443 | WordPress Mega Menu <= 2.0.6 - Arbitrary File Creation | 9.8 | |
| High | CVE-2026-17031 | QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Missing Authorization | 8.1 | |
| High | CVE-2019-15779 | QuadLayers WP Social Feed Gallery: security vulnerability | 8.8 | |
| Medium | CVE-2026-114705 | WordPress WP Social Feed Gallery plugin <= 5.0.13 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2026-18404 | QuadLayers Social Chat: Cross-site Scripting | 6.4 | |
| High | CVE-2022-23982 | WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Server Information Exposure vulnerability | 4.3 | |
| High | CVE-2025-58686 | WordPress Perfect Brands for WooCommerce plugin <= 3.6.2 - SQL Injection vulnerability | 8.5 | |
| Medium | CVE-2025-13930 | QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Missing Authorization | 5.3 | |
| Medium | CVE-2024-39640 | WordPress Social Feed Gallery plugin <= 4.3.9 - Broken Access Control vulnerability | 6.5 | |
| Medium | CVE-2025-12500 | QuadLayers Checkout Field Manager (Checkout Manager) for WooCommerce: Unrestricted Upload of File with Dangerous Type | 5.3 | |
| Medium | CVE-2025-10144 | Perfect Brands for WooCommerce <= 3.6.2 - Authenticated (Contributor+) SQL Injection | 6.5 | |
| Medium | CVE-2022-2361 | Social Chat < 6.0.5 - Admin+ Stored Cross-Site Scripting | 4.8 | |
| Medium | CVE-2025-10637 | Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure | 5.3 | |
| Medium | CVE-2025-2821 | Search Exclude <= 2.4.9 - Missing Authorization to Unauthenticated Plugin Settings Modification | 5.3 | |
| Medium | CVE-2022-23981 | WordPress Perfect Brands for WooCommerce plugin <= 2.0.4 - Set Featured Brand vulnerability | 4.3 | |
| Medium | CVE-2025-63016 | WordPress QuadLayers TikTok Feed plugin <= 4.6.5 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2025-62116 | WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability | 5.3 | |
| Medium | CVE-2025-10646 | QuadLayers Search Exclude: Missing Authorization | 4.3 | |
| Medium | CVE-2025-2871 | WordPress Mega Menu – QuadMenu <= 3.2.0 - Cross-Site Request Forgery to Limited User Meta Update | 4.3 |
Products
| Perfect Brands For Woocommerce | 4 | 0 |
| Checkout Field Manager (checkout Manager) For Woocommerce | 3 | 0 |
| Wp Social Feed Gallery | 3 | 0 |