quantumcloud Vulnerabilities and Affected Products
Vulnerabilities associated with KBx Pro Ultimate.
Products
Clear product- WPBot – AI ChatBot for Live Support, Lead Generation, AI Services15 vulnerabilities
- Simple Link Directory11 vulnerabilities
- ChatBot8 vulnerabilities
- AI ChatBot5 vulnerabilities
- WPBot Pro Wordpress Chatbot5 vulnerabilities
- Conversational Forms for ChatBot4 vulnerabilities
- Simple Business Directory Pro4 vulnerabilities
- AI Infographic Maker2 vulnerabilities
- infographic_maker2 vulnerabilities
- KBx Pro Ultimate2 vulnerabilities
- SEO Help2 vulnerabilities
- Simple Link Directory Pro2 vulnerabilities
- ChatBot for eCommerce – WoowBot1 vulnerability
- ChatBot with AI1 vulnerability
- Floating Action Buttons1 vulnerability
- Floating Buttons for WooCommerce1 vulnerability
- floating_buttons1 vulnerability
- Highlight1 vulnerability
- iChart – Easy Charts and Graphs1 vulnerability
- Infographic Maker – iList1 vulnerability
- QC SEO Help for llms.txt, AI Analytics, AI Content Writer, Subtitle to Article1 vulnerability
- simple_link_directory1 vulnerability
- simple_video_directory1 vulnerability
- Slider Hero with Video Background, Animation1 vulnerability
- WoowBot Pro Max1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-60232CRITICAL | WordPress KBx Pro Ultimate plugin <= 8.0.5 - PHP Object Injection vulnerabilityDeserialization of Untrusted Data vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Object Injection.This issue affects KBx Pro Ultimate: from n/a through <= 8.0.5. CWE-502Oct 22, 2025 | CVSS9.8v3.1 | EPSS0.542% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-31053HIGH | WordPress KBx Pro Ultimate plugin < 8.0.5 - Arbitrary File Deletion VulnerabilityImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in quantumcloud KBx Pro Ultimate knowledgebase-helpdesk-pro allows Path Traversal.This issue affects KBx Pro Ultimate: from n/a through < 8.0.5. CWE-22May 23, 2025 | CVSS7.7v3.1 | EPSS0.479% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |