Vulnerabilities in Qode
12 resultsCVE-2024-50457HIGHWordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-49690HIGHWordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2026-65546CRITICALWordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerabilityEPSS 0.4%CVE-2026-42712HIGHWordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerabilityEPSS 0.3%CVE-2024-9860MEDIUMBridge Core <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Demo ImportEPSS 0.3%CVE-2024-9292MEDIUMBridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeEPSS 0.3%CVE-2024-38712MEDIUMWordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-15609MEDIUMBridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode AttributeEPSS 0.3%CVE-2026-42631HIGHWordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-42632HIGHWordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-62079MEDIUMWordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-64383MEDIUMWordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%