WordPress security by component

Qyrr – simply and modern QR-Code creation

Plugin description

Qyrr – simply and modern QR-Code creation is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 30, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: qyrr-code

Latest vulnerability

CVE-2025-10000: Qyrr – simply and modern QR-Code creation: Dangerous file upload

Qyrr – simply and modern QR-Code creation is affected by dangerous file upload. Exploitation requires at least contributor-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.

PublishedSep 30, 2025

Safe version guidanceSee mitigation notes

		Safe version
Sep 30, 2025	CVE-2025-10000 Qyrr – simply and modern QR-Code creation: Dangerous file upload Qyrr – simply and modern QR-Code creation is affected by dangerous file upload. Exploitation requires at least contributor-level access. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.	See mitigation notes	CVE6.4 NVDPending