Skip to content
Qodeinteractive vulnerabilities
Newest
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget
CVE-2026-115183
2.4 Low
-
qode qi addons for elementor
WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62079
6.5 Medium
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter
CVE-2026-92249
6.1 Medium
-
qode qi blocks
Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter
CVE-2026-10096
4.3 Medium
-
mikado-themes hendon
WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability
CVE-2025-67937
8.1 High
-
mikado-themes curly
WordPress Curly theme < 3.3 - Local File Inclusion vulnerability
CVE-2025-67936
8.1 High
-
mikado-themes optimize
WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability
CVE-2025-67935
8.1 High
-
mikado-themes wellspring
WordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability
CVE-2025-67934
8.1 High
-
mikado-themes lekker
WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability
CVE-2025-69034
8.1 High
-
mikado-themes fivestar
WordPress FiveStar theme <= 1.7 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-69032
5.4 Medium
-
mikado-themes backpack traveler
WordPress Backpack Traveler theme <= 2.10.3 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-69030
5.4 Medium
-
mikado-themes wilmër, qodeinteractive wilmer +1 more
WordPress Wilmër theme < 3.5 - Local File Inclusion vulnerability
CVE-2025-67515
8.8 High
-
mikado-themes powerlift
WordPress Powerlift theme < 3.2.1 - Broken Access Control vulnerability
CVE-2025-66532
4.3 Medium
-
qodeinteractive qode wishlist for woocommerce
QODE Wishlist for WooCommerce <= 1.2.7 - Unauthenticated Insecure Direct Object Reference to Wishlist Update
CVE-2025-13157
5.3 Medium
-
qode qi blocks
Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize
CVE-2025-12182
4.3 Medium
-
mikado-themes wanderland
WordPress Wanderland theme <= 1.7.1 - Local File Inclusion Vulnerability
CVE-2025-39467
8.1 High
-
mikado-themes dør, qodeinteractive dor +1 more
WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability
CVE-2025-39466
8.1 High
-
qode qi blocks
Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
CVE-2025-12180
4.3 Medium
-
mikado-themes bard
WordPress Bard theme <= 1.6 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-64368
5.4 Medium
-
qodeinteractive qi addons for elementor
Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget
CVE-2025-8146
6.4 Medium
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-6252
6.4 Medium
-
mikado-themes mediclinic
WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability
CVE-2025-49295
8.1 High
-
mikado-themes grandprix
WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability
CVE-2025-49296
8.1 High
-
mikado-themes grill and chow
WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability
CVE-2025-49297
8.1 High
-
mikado-themes wilmër, qodeinteractive wilmer +1 more
WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability
CVE-2025-39494
8.1 High
-
mikado-themes backpack traveler
WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability
CVE-2025-39490
8.1 High
-
mikado-themes foton
WordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability
CVE-2025-39458
8.1 High
-
qode qi blocks
Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block
CVE-2025-1627
5.4 Medium
-
qode qi blocks
Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block
CVE-2025-1626
5.4 Medium
-
qode qi blocks
Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block
CVE-2025-1625
5.4 Medium
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13699
6.4 Medium
-
qode essential addons, qodeinteractive qode essential addons +1 more
WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability
CVE-2024-50457
7.5 High
-
qode qi blocks
WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability
CVE-2024-49690
7.5 High
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure
CVE-2024-9530
4.3 Medium
-
qode qi blocks
WordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-38712
6.5 Medium
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-4887
7.5 High
-
qode qi blocks
Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-5221
6.4 Medium
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget
CVE-2024-4364
6.4 Medium
-
qode interactive qi addons for elementor
WordPress Qi Addons For Elementor plugin <= 1.6.3 - Local File Inclusion vulnerability
CVE-2023-47679
6.4 Medium
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget
CVE-2024-3309
6.4 Medium
-
qodeinteractive qi addons for elementor
Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-0826
6.4 Medium
-
qode interactive essential addons, qodeinteractive qode essential addons +1 more
WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)
CVE-2023-47840
Public exploit
9.9 Critical
-
qode interactive qi addons for elementor
WordPress Qi Addons For Elementor Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-47680
6.5 Medium
-
notfound bridge core
WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-40333
7.1 High
-
qodeinteractive bridge
DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress...
CVE-2017-13138
6.1 Medium