quomodosoft records
10 published records for vendor quomodosoft.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 50%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
- CWE-862 Missing Authorization1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2025-47628No exploit | WordPress QS Dark Mode plugin <= 3.0 - Broken Access Control Vulnerabilityquomodosoft · qs dark mode · CWE-862 | High8.8 | — | 0.3% | May 7, 2025 |
30Monitor | CVE-2024-52497No exploit | WordPress Shopready plugin <= 3.6 - Local File Inclusion vulnerabilityquomodosoft · shopready · CWE-98 | High7.5 | — | 0.7% | Nov 28, 2024 |
24Monitor | CVE-2024-47353No exploit | WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerabilityquomodosoft · elementsready · CWE-601 | Medium6.1 | — | 0.2% | Oct 11, 2024 |
21Monitor | CVE-2024-34374No exploit | WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerabilityquomodosoft · elementsready · CWE-79 | Medium5.4 | — | 0.3% | May 6, 2024 |
21Monitor | CVE-2024-9444No exploit | ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Uploadquomodosoft · elementsready · CWE-79 | Medium5.4 | — | 0.3% | Oct 16, 2024 |
21Monitor | CVE-2024-54224No exploit | WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerabilityquomodosoft · elementsready · CWE-79 | Medium5.4 | — | 0.3% | Dec 9, 2024 |
21Monitor | CVE-2024-5152No exploit | ElementsReady Addons for Elementor <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingquomodosoft · elementsready · CWE-79 | Medium5.4 | — | 0.3% | Jun 6, 2024 |
21Monitor | CVE-2024-47329No exploit | WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerabilityquomodosoft · elementsready · CWE-79 | Medium5.4 | — | 0.2% | Oct 6, 2024 |
21Monitor | CVE-2024-51787No exploit | WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerabilityquomodosoft · elementsready · CWE-79 | Medium5.4 | — | 0.2% | Nov 9, 2024 |
17Monitor | CVE-2024-10356No exploit | ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templatesquomodosoft · elementsready · CWE-200 | Medium4.3 | — | 0.4% | Dec 17, 2024 |
- CVE-2025-4762835Monitor
WordPress QS Dark Mode plugin <= 3.0 - Broken Access Control Vulnerability
HighCVSS 8.8No exploitEPSS 0%quomodosoft · qs dark modeMay 7, 2025
- CVE-2024-5249730Monitor
WordPress Shopready plugin <= 3.6 - Local File Inclusion vulnerability
HighCVSS 7.5No exploitEPSS 0%quomodosoft · shopreadyNov 28, 2024
- CVE-2024-4735324Monitor
WordPress ElementsReady Addons for Elementor plugin <= 6.4.2 - Open Redirection vulnerability
MediumCVSS 6.1No exploitEPSS 0%quomodosoft · elementsreadyOct 11, 2024
- CVE-2024-3437421Monitor
WordPress ElementsReady Addons for Elementor plugin <= 5.8.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%quomodosoft · elementsreadyMay 6, 2024
- CVE-2024-944421Monitor
ElementsReady Addons for Elementor <= 6.4.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
MediumCVSS 5.4No exploitEPSS 0%quomodosoft · elementsreadyOct 16, 2024
- CVE-2024-5422421Monitor
WordPress ElementsReady Addons for Elementor plugin <= 6.4.7 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%quomodosoft · elementsreadyDec 9, 2024
- CVE-2024-515221Monitor
ElementsReady Addons for Elementor <= 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%quomodosoft · elementsreadyJun 6, 2024
- CVE-2024-4732921Monitor
WordPress ElementsReady Addons for Elementor plugin <= 6.4.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%quomodosoft · elementsreadyOct 6, 2024
- CVE-2024-5178721Monitor
WordPress ElementsReady Addons for Elementor plugin <= 6.4.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%quomodosoft · elementsreadyNov 9, 2024
- CVE-2024-1035617Monitor
ElementsReady Addons for Elementor <= 6.4.8 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
MediumCVSS 4.3No exploitEPSS 0%quomodosoft · elementsreadyDec 17, 2024