Qode

7 CVEs across 4 Qode products. Browse Qode vulnerabilities, severities, and proof-of-concept exploits.

Qode products with known CVEs

ProductCVEs
Qi Blocks3
Bridge Core2
Qode Essential Addons1
Qode Tours1
Qode CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-65546Critical9.32026-08-06Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.
CVE-2025-64383Medium6.52025-11-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-blocks allows Stored XSS.This issue aff…
CVE-2024-50457High7.52024-10-28Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qode Essential Addons qode-essent…
CVE-2024-49690High7.52024-10-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qi Blocks qi-blocks.This issue af…
CVE-2024-9860Medium5.42024-10-12The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the 'import_action…
CVE-2024-9292Medium6.42024-10-08The Bridge Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'formforall' shortcode in versions up to, and including, 3.2.0 due to ins…
CVE-2024-38712Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-blocks.This issue affects Qi Blocks: fr…