PatchTheCVExv random quotes vulnerabilities and fixes
Recent CVEs affecting xv random quotes, with upgrade or downgrade steps. 2 tracked.
Also searched as: xvrandomquotes.
xv random quotes has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2025-03-11. Highest priority: CVE-2024-13574 (score 35/100).
- CVE-2024-13580 MEDIUM 4.3 UPGRADE The XV Random Quotes WordPress plugin through 1.40 does not have CSRF check in place when updating its setting
- CVE-2024-13574 HIGH 7.1 UPGRADE The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting
FAQ
How do I fix xv random quotes vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is xv random quotes being exploited right now?
None of the tracked xv random quotes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which xv random quotes CVE should I patch first?
CVE-2024-13574 currently ranks highest (35/100): The XV Random Quotes WordPress plugin through 1.40 does not sanitise and escape a parameter before outputting .