Personal QR Message vulnerabilities
We track 1 vulnerability in Personal QR Message products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 3, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Personal QR Message vulnerabilities
- 9.8 Critical severity
Personal QR Message: Unrestricted Upload of File with Dangerous Type
The Personal QR Message WordPress plugin through 1.0 does not restrict the file types that can be uploaded through an unauthenticated handler, allowing unauthenticated users to upload arbitrary executable PHP files that are directly reachable, leading to remot