Flex QR Code Generator vulnerabilities

2 known vulnerabilities in Flex QR Code Generator from Ajitdas. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Flex QR Code Generator: Unrestricted Upload of File with Dangerous Type

  CVE-2025-12673Dec 6, 2025Ajitdas

  The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the update_qr_code() function in all versions up to, and including, 1.2.7. This makes it possible for unauthenticated attackers to up

• 9.8 Critical severity

  Flex QR Code Generator: Unrestricted Upload of File with Dangerous Type

  CVE-2025-10041Oct 15, 2025Ajitdas

  The Flex QR Code Generator plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in thesave_qr_code_to_db() function in all versions up to, and including, 1.2.5. This makes it possible for unauthenticated attackers to