Quantumrose vulnerabilities
We track 1 vulnerability in Quantumrose products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 3, 2025.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Quantumrose vulnerabilities
- 9.1 Critical severity
WPRecovery: Improper Neutralization of Special Elements used in an SQL Command
The WPRecovery plugin for WordPress is vulnerable to SQL Injection via the 'data[id]' parameter in all versions up to, and including, 2.0. This is due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ