QuarkA vulnerabilities
We track 2 vulnerabilities in QuarkA products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 7, 2026.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest QuarkA vulnerabilities
- 8.8 High severity
QA Assistants – Driven by data: Deserialization of Untrusted Data
The QA Assistants – Driven by data plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 5.3.0 via the 'dlevent_ver' parameter. This is due to unrestricted PHP deserialization via wrap_unserialize_static() calling uns
- 7.1 High severity
QA Analytics: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuarkA QA Analytics qa-heatmap-analytics allows Stored XSS.This issue affects QA Analytics: from n/a through 5.3.0.1.