WordPress plugin
XV Random Quotes security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium3
- Low0
All XV Random Quotes vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤1.41Update to 2.0.1 | CVE-2025-31903 | |
| High7.5 | Unauthenticated SQL Injection ≤2.0.0Update to 2.0.1 | CVE-2025-30971 | |
| Medium4.3 | Cross-Site Request Forgery to Settings Reset ≤1.40No patch available | CVE-2024-13580 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤1.40No patch available | CVE-2024-13574 |
- Medium6.1Reflected Cross-Site Scripting
≤1.41Update to 2.0.1
- High7.5Unauthenticated SQL Injection
≤2.0.0Update to 2.0.1
- Medium4.3Cross-Site Request Forgery to Settings Reset
≤1.40No patch available
- Medium6.1Reflected Cross-Site Scripting
≤1.40No patch available
XV Random Quotes: common questions
Does XV Random Quotes have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in XV Random Quotes: 1 high, 3 medium. At least one is not fixed in the latest version.
How do I check which version of XV Random Quotes I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent XV Random Quotes vulnerability?
CVE-2025-31903, published Apr 3, 2025: XV Random Quotes <= 1.41 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any XV Random Quotes vulnerability listed in CISA KEV?
No. None of the known XV Random Quotes vulnerabilities is currently listed in the CISA KEV catalog.