Kaya QR Code Generator

Kaya QR Code Generator has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2023; all 2 are fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (100%).

Every one of the 2 issues recorded for Kaya QR Code Generator has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by Kévin Mosbahi (Mika). Kaya QR Code Generator is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
6.4/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Kaya QR Code Generator vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2023-30784

Kaya QR Code Generator <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via qrCode attribute

Read the full analysis

Vulnerability Records

2 records
Kaya QR Code Generator banner
Latestv1.6.0

Kaya QR Code Generator

Kaya Studio

Author

Kaya Studio

4.4(38)
88/100
Last Updated
2026-05-17 (4mo ago)
Active Installs
10,000+
Downloads
144,676
Requires WP
4.6.0+
Requires PHP
5.2+
Tested up to
WP 7.0.4
Created
2017-09-01 (9y ago)

Why use “Kaya QR Code Generator”? This plugin creates QR Codes (Quick Response codes) through a widget or a shortCode for easy insertion into your pages, posts, sidebars, WooCommerce products, etc. Easy install and use, generate dynamic QR Codes with your custom settings. Content can be any text, link and even a Bitcoin address or the current page URL. The QR Code generator library is included (based on qr.js written by Kang Seonghoon) and don’t need any dependencies. QR Code Features Add a title and choose its horizontal alignment. Use static or dynamic content to encode in QR Code. Add a query string to the automatic current page url. Add an anchor link to the automatic current page url. Select the information repetition level (Ability to correct read errors). Set the QR Code image size. Set the QR Code image border level. QR Code image color and background color customizable. Set the QR Code image horizontal alignment. Add shadows to QR Code image. Image alternate text customizable. Clickable link on image customizable (support non-standard URL schemes). Add a button to download QR Code image on frontend, with custom text and alignment. Generator Features Use as built-in Widget. Use as shortcode with generator assistant. QR Code preview and download on Shortcode generator assistant. The Shortcode generator assistant is available on pages, posts, WooCommerce products, any public custom post types and on the plugin option page. Setting to enable or disable the reduced shortcode generator assistant in editor. Setting to display or hide Shortcode generator assistant to selected user role. Setting to display or hide Shortcode generator assistant to selected post type. Setting to select Shortcode generator assistant Meta box context and priority in editor. Setting to choose the default QR Code image color and background color. Compatible with WordPress MultiSite and WooCommerce. Basic shortcode Static content: [kaya_qrcode content="my encoded content"]. Dynamic content: [kaya_qrcode_dynamic][example_shortcode][/kaya_qrcode_dynamic]. Privacy This plugin does not collect or store any user data. It does not set any cookies and does not connect to any third-party applications. This plugin only generate QR Code image based on your custom content. Available Languages English. French. Feedback Any suggestions or feedback is welcome, thank you for using or trying one of my plugins. Please take the time to let me know about your experiences and rate this plugin.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C