QR code MeCard/vCard generator

QR code MeCard/vCard generator has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for QR code MeCard/vCard generator has a vendor fix available, so running the current release closes it.

All of these findings were reported by Abdi Pranata. QR code MeCard/vCard generator is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
4.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all QR code MeCard/vCard generator vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2023-38477

QR code MeCard/vCard generator <= 1.6.0 - Missing Authorization via wqm_make_url_permanent

Read the full analysis

Vulnerability Records

1 records
QR code MeCard/vCard generator banner
Latestv1.8.0

QR code MeCard/vCard generator

stasionok

Author

stasionok

4.5(8)
90/100
Last Updated
2026-05-20 (4mo ago)
Active Installs
2,000+
Downloads
49,865
Requires WP
5.0+
Requires PHP
7.3+
Tested up to
WP 7.0.4
Created
2019-12-10 (7y ago)

Plugin Generate QR code in vCard or MeCard format with your contact information. Share your contact information such as emails and phone numbers and much more through QR code with WordPress using shortcode, widget or everywhere else by direct link. That plugin use MeCard format and vCard version 3 format as most compatible and frequently used. You can read detailed information about vCard here, and about MeCard here. How to increase photo size in QR code vcf file You can override qr-code thumbnail with following code in your theme functions.php file `add_action( &#8216;after_setup_theme’, &#8216;change_qr_code_photo_size’ ); function change_qr_code_photo_size() { // Override the image size add_image_size( &#8216;qr-code-photo’, 600, 600 ); }“`

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C