Qode Qi Blocks vulnerabilities

• qode qi blocks Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter CVE-2026-10096 4.3 MediumJuly 1, 2026
• qode qi blocks Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize CVE-2025-12182 4.3 MediumNovember 15, 2025
• qode qi blocks WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-64383 6.5 MediumNovember 13, 2025
• qode qi blocks Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update CVE-2025-12180 4.3 MediumNovember 1, 2025
• qode qi blocks Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block CVE-2025-1627 5.4 MediumMay 19, 2025
• qode qi blocks Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block CVE-2025-1626 5.4 MediumMay 19, 2025
• qode qi blocks Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block CVE-2025-1625 5.4 MediumMay 19, 2025
• qode qi blocks WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability CVE-2024-49690 7.5 HighOctober 23, 2024
• qode qi blocks WordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-38712 6.5 MediumJuly 20, 2024
• qode qi blocks Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting CVE-2024-5221 6.4 MediumJune 6, 2024