Qodeinteractive - vulnerabilities (CVEs)

43 CVEs in 22 products, 0 in the last 30 days, newest from 2026-09-18.

Products

Qi Addons For Elementor - 9 CVEs
Qi Blocks - 6 CVEs
Backpack Traveler - 2 CVEs
Qode Essential Addons - 2 CVEs
Wilmer - 2 CVEs
Bard - 1 CVEs
Bridge - 1 CVEs
Bridge Core - 1 CVEs
Curly - 1 CVEs
Dor - 1 CVEs
Fivestar - 1 CVEs
Foton - 1 CVEs
Grandprix - 1 CVEs
Grill And Chow - 1 CVEs
Hendon - 1 CVEs
Lekker - 1 CVEs
Mediclinic - 1 CVEs
Optimize - 1 CVEs
Powerlift - 1 CVEs
Qode Wishlist For Woocommerce - 1 CVEs
Wanderland - 1 CVEs
Wellspring - 1 CVEs

Newest CVEs of Qodeinteractive

CVE-2026-92249 - CVSS 6.1 (medium), 2026-09-18: The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including,…
CVE-2026-10096 - CVSS 4.3 (medium), 2026-07-01: The Qi Blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.4.9 via the 'page_id' parameter…
CVE-2025-67935 - CVSS 8.1 (high), 2026-01-08: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp…
CVE-2025-67936 - CVSS 8.1 (high), 2026-01-08: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP…
CVE-2025-67934 - CVSS 8.1 (high), 2026-01-08: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring…
CVE-2025-67937 - CVSS 8.1 (high), 2026-01-08: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows…
CVE-2025-69034 - CVSS 8.1 (high), 2025-12-30: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows…
CVE-2025-69030 - CVSS 5.4 (medium), 2025-12-30: Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured…
CVE-2025-69032 - CVSS 5.4 (medium), 2025-12-30: Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control…
CVE-2025-67515 - CVSS 8.8 (high), 2025-12-09: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows…
CVE-2025-66532 - CVSS 4.3 (medium), 2025-12-09: Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-13157 - CVSS 5.3 (medium), 2025-11-27: The QODE Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.7 via the…
CVE-2025-12182 - CVSS 4.3 (medium), 2025-11-15: The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `resize_image_callback()` function in all…
CVE-2025-39467 - CVSS 8.1 (high), 2025-11-06: Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a…
CVE-2025-39466 - CVSS 8.1 (high), 2025-11-06: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP…
CVE-2025-12180 - CVSS 4.3 (medium), 2025-11-01: The Qi Blocks plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.3. This is due to the plugin storing…
CVE-2025-64368 - CVSS 5.4 (medium), 2025-10-31: Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.
CVE-2025-8146 - CVSS 6.4 (medium), 2025-08-02: The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TypeOut Text widget in all versions up to, and…
CVE-2025-6252 - CVSS 6.4 (medium), 2025-06-28: The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including,…
CVE-2025-49297 - CVSS 9.8 (critical), 2025-06-09: Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from…
CVE-2025-49295 - CVSS 9.8 (critical), 2025-06-09: Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a…
CVE-2025-49296 - CVSS 9.8 (critical), 2025-06-09: Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through…
CVE-2025-39494 - CVSS 9.8 (critical), 2025-05-23: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows…
CVE-2025-39490 - CVSS 8.1 (high), 2025-05-23: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler…
CVE-2025-39458 - CVSS 8.1 (high), 2025-05-19: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton foton allows PHP…
CVE-2025-1627 - CVSS 5.4 (medium), 2025-05-19: The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is…
CVE-2025-1626 - CVSS 5.4 (medium), 2025-05-19: The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post where…
CVE-2025-1625 - CVSS 5.4 (medium), 2025-05-19: The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the…
CVE-2024-13699 - CVSS 6.4 (medium), 2025-02-04: The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter in all versions up to, and including,…
CVE-2024-50457 - CVSS 8.8 (high), 2024-10-28: Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qode Essential Addons…