← WordPress Vulnerabilities
WordPress security by component

Quttera Web Malware Scanner

Quttera Web Malware Scanner scans WordPress websites for malware and suspicious website content.

Quttera Web Malware Scanner (quttera-web-malware-scanner) is a WordPress plugin with 3 published CVE records in this archive. The latest tracked vulnerability was published Aug 15, 2025; the highest published CVSS base score is 7.2.

Plugin slug: quttera-web-malware-scanner

CVE-2025-8013: Quttera Web Malware Scanner: Server-side request forgery

Quttera Web Malware Scanner is affected by server-side request forgery. Exploitation requires an authenticated administrator account. The vulnerable server can be induced to make attacker-selected network requests.

PublishedAug 15, 2025
Safe version guidanceSee mitigation notes
Published vulnerabilities for quttera-web-malware-scanner
Safe version
Aug 15, 2025 CVE-2025-8013
Quttera Web Malware Scanner: Server-side request forgery
Quttera Web Malware Scanner is affected by server-side request forgery. Exploitation requires an authenticated administrator account. The vulnerable server can be induced to make attacker-selected network requests.
See mitigation notes
CVE3.8
Dec 18, 2023 CVE-2023-6222
Quttera Web Malware Scanner: Filesystem traversal
Quttera Web Malware Scanner is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
See mitigation notes
CVE7.2
Dec 18, 2023 CVE-2023-6065
Quttera Web Malware Scanner: A security weakness
Quttera Web Malware Scanner is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVEPending