quantumcloud has 4 CVEs on record. 4 were published in the last 90 days. The median CVSS is 8.0 (high), with 1 rated critical. Most affected products: conversational-forms (2), AI ChatBot for WooCommerce – WoowBot (1), WPBot – AI ChatBot for Live Support, Lead Generation, AI Services (1).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 8.0
- Publish → KEV
- —
- Last 90 days
- 4 prev 0
Products
- conversational-forms 2
- AI ChatBot for WooCommerce – WoowBot 1
- WPBot – AI ChatBot for Live Support, Lead Generation, AI Services 1
Worst active — by depth score
CVE-2026-110886Critical· 9.8WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability54CVE-2026-95531High· 8.8Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.48CVE-2026-83593High· 7.2The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient inpu…40CVE-2026-111372Medium· 4.3AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action24
quantumcloud vulnerabilities
CVEs affecting quantumcloud, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
CVE-2026-111372Medium· 4.3AI ChatBot for WooCommerce <= 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Modification via qcld_rag_manual_sync AJAX Action
The AI ChatBot for WooCommerce – WoowBot plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.0.0. This is due to the plugin not properly verifying that a user is authorized to perform an act…
CVE-2026-110886Critical· 9.8WordPress Conversational Forms for ChatBot plugin <= 1.5.1 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in QuantumCloud Conversational Forms for ChatBot conversational-forms allows Object Injection.This issue affects Conversational Forms for ChatBot: from n/a through 1.5.1.
CVE-2026-95531High· 8.8Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
Subscriber PHP Object Injection in Conversational Forms for ChatBot <= 1.5.0 versions.
CVE-2026-83593High· 7.2The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient inpu…
The WPBot – AI ChatBot for Live Support, Lead Generation, AI Services plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'conversation' parameter in all versions up to, and including, 8.7.3 due to insufficient inpu…