WordPress security by component

Quttera Web Malware Scanner

Plugin description

Quttera Web Malware Scanner is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Aug 15, 2025; the highest CVE/CNA score is 7.2.

Plugin slug: quttera-web-malware-scanner

Latest vulnerability

CVE-2025-8013: Quttera Web Malware Scanner: Server-side request forgery

Quttera Web Malware Scanner is affected by server-side request forgery. Exploitation requires at least administrator-level access. The vulnerable server can be induced to make attacker-selected network requests.

PublishedAug 15, 2025

Safe version guidanceSee mitigation notes

		Safe version
Aug 15, 2025	CVE-2025-8013 Quttera Web Malware Scanner: Server-side request forgery Quttera Web Malware Scanner is affected by server-side request forgery. Exploitation requires at least administrator-level access. The vulnerable server can be induced to make attacker-selected network requests.	See mitigation notes	CVE3.8 NVDPending
Dec 18, 2023	CVE-2023-6222 Quttera Web Malware Scanner: Filesystem traversal Quttera Web Malware Scanner is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.	See mitigation notes	CVE7.2 NVD7.2
Dec 18, 2023	CVE-2023-6065 Quttera Web Malware Scanner: A security weakness Quttera Web Malware Scanner is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVD5.3