PatchTheCVEvr-frases vulnerabilities and fixes
Recent CVEs affecting vr-frases, with upgrade or downgrade steps. 3 tracked.
Also searched as: vr frases.
vr-frases has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-02-17. Highest priority: CVE-2024-13626 (score 37/100).
- CVE-2025-0861 MEDIUM 4.9 UPGRADE The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to SQL Injection via several paramet
- CVE-2025-0860 MEDIUM 6.1 UPGRADE The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting vi
- CVE-2024-13626 HIGH 7.1 UPGRADE The VR-Frases (collect & share quotes) WordPress plugin through 3.0.1 does not sanitise and escape a parameter
FAQ
How do I fix vr-frases vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is vr-frases being exploited right now?
None of the tracked vr-frases CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which vr-frases CVE should I patch first?
CVE-2024-13626 currently ranks highest (37/100): The VR-Frases (collect & share quotes) WordPress plugin through 3.0.1 does not sanitise and escape a parameter.