Nikki Blight vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nikki Blight products: 2 record(s), with severity, exploitation and fixes.

QR Redirector 2

Exploited only (KEV) →

CVE-2026-105069 Medium · 6.5 CWE-79 Oct 5, 2026

WordPress QR Redirector plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nikki Blight QR Redirector qr-redirector allows Stored XSS.This issue affects QR Redirector: from n/a through 2.0.5.

CVE-2026-24545 Medium · 4.3 CWE-862 May 25, 2026

WordPress QR Redirector plugin <= 2.0.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in Nikki Blight QR Redirector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects QR Redirector: from n/a through 2.0.3.