QuanticaLabs vulnerabilities

We track 9 vulnerabilities in QuanticaLabs products across 7 products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on March 5, 2026.

9vulnerabilities

2critical

7high

0exploited

8.0average CVSS score

Latest QuanticaLabs vulnerabilities

7.1 High severity
MediCenter - Health Medical Clinic: Improper Neutralization of Input During Web Page Generation
CVE-2026-28137Mar 5, 2026QuanticaLabs
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Reflected XSS.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 14.
9.8 Critical severity
MediCenter - Health Medical Clinic: Deserialization of Untrusted Data
CVE-2025-54014Aug 20, 2025QuanticaLabs
Deserialization of Untrusted Data vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Object Injection.This issue affects MediCenter - Health Medical Clinic: from n/a through <= 15.1.
7.1 High severity
CSS3 Compare Pricing Tables for WordPress: Improper Neutralization of Input During Web Page Generation
CVE-2025-47554Jul 16, 2025QuanticaLabs
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids allows Reflected XSS.This issue affects CSS3 Compare Pricing Tables for W
8.5 High severity
GymBase Theme Classes: Improper Neutralization of Special Elements used in an SQL Command
CVE-2025-54026Jul 16, 2025QuanticaLabs
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in QuanticaLabs GymBase Theme Classes gymbase_classes allows SQL Injection.This issue affects GymBase Theme Classes: from n/a through <= 1.4.
7.1 High severity
Pressroom: Improper Neutralization of Input During Web Page Generation
CVE-2025-32311Jul 4, 2025QuanticaLabs
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Pressroom pressroom allows Reflected XSS.This issue affects Pressroom: from n/a through <= 7.0.
7.1 High severity
CSS3 Vertical Web Pricing Tables: Improper Neutralization of Input During Web Page Generation
CVE-2025-52727Jun 27, 2025QuanticaLabs
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs CSS3 Vertical Web Pricing Tables css3_vertical_web_pricing_tables allows Reflected XSS.This issue affects CSS3 Vertical Web Pricing Tables: from
7.1 High severity
CSS3 Accordions for WordPress: Cross-Site Request Forgery
CVE-2025-31922May 16, 2025QuanticaLabs
Cross-Site Request Forgery (CSRF) vulnerability in QuanticaLabs CSS3 Accordions for WordPress css3_accordions allows Stored XSS.This issue affects CSS3 Accordions for WordPress: from n/a through <= 3.0.
8.2 High severity
Chauffeur Taxi Booking System for WordPress: Missing Authorization
CVE-2024-32692May 17, 2024QuanticaLabs
Missing Authorization vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a through 6.9.
10.0 Critical severity
Chauffeur Taxi Booking System for WordPress: Unrestricted Upload of File with Dangerous Type
CVE-2024-31115Mar 31, 2024QuanticaLabs
Unrestricted Upload of File with Dangerous Type vulnerability in QuanticaLabs Chauffeur Taxi Booking System for WordPress.This issue affects Chauffeur Taxi Booking System for WordPress: from n/a through 7.2.