High 8.2
2025-04-17< 4.0.2
CVE-2025-22636
Minimum safe version
4.0.2
Update to 4.0.2 or later to address 4 fixable vulnerabilities
CVE-2025-22636
CVE-2024-13626
VR-Frases (collect & share quotes) <= 3.0.1 - Authenticated (Admin+) SQL Injection
WordPress VR-Frases Plugin <= 3.0.1 is vulnerable to Cross Site Scripting (XSS)