Skip to content
Qode vulnerabilities
Newest
-
qode tours
WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
CVE-2026-42712
8.5 High
-
qode real estate
WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42632
7.1 High
-
qode music
WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42631
7.1 High
-
qode qi addons for elementor
WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62079
6.5 Medium
-
qode bridge - creative multipurpose wordpress theme
Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute
CVE-2026-15609
6.4 Medium
-
qode tours
WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability
CVE-2026-65546
9.3 Critical
-
qode qi blocks
Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter
CVE-2026-10096
4.3 Medium
-
qode qi blocks
Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize
CVE-2025-12182
4.3 Medium
-
qode qi blocks
WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
CVE-2025-64383
6.5 Medium
-
qode qi blocks
Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
CVE-2025-12180
4.3 Medium
-
qode qi blocks
Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block
CVE-2025-1627
5.4 Medium
-
qode qi blocks
Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block
CVE-2025-1626
5.4 Medium
-
qode qi blocks
Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block
CVE-2025-1625
5.4 Medium
-
qode essential addons, qodeinteractive qode essential addons +1 more
WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability
CVE-2024-50457
7.5 High
-
qode qi blocks
WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability
CVE-2024-49690
7.5 High
-
notfound bridge core
Bridge Core <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Demo Import
CVE-2024-9860
5.4 Medium
-
notfound bridge core
Bridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
CVE-2024-9292
6.4 Medium
-
qode qi blocks
WordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38712
6.5 Medium
-
qode qi blocks
Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-5221
6.4 Medium