Qodeinteractive

14 CVEs across 24 Qodeinteractive products. Browse Qodeinteractive vulnerabilities, severities, and proof-of-concept exploits.

Qodeinteractive products with known CVEs

ProductCVEs
Qi Addons For Elementor9
Qi Addons For Elementor8
Qi Blocks6
Qi Blocks4
Backpack Traveler2
Qode Essential Addons2
Wilmer2
Bard1
Bridge1
Bridge Core1
Curly1
Dor1
Fivestar1
Foton1
Grandprix1
Grill And Chow1
Hendon1
Lekker1
Mediclinic1
Optimize1
Powerlift1
Qode Wishlist For Woocommerce1
Wanderland1
Wellspring1
Qodeinteractive CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-10096Medium4.32026-07-01The Qi Blocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.4.9 via the 'page_id' parameter du…
CVE-2025-67937High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows PHP…
CVE-2025-67936High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP L…
CVE-2025-67935High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allo…
CVE-2025-67934High8.12026-01-08Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring al…
CVE-2025-69034High8.12025-12-30Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP…
CVE-2025-69032Medium5.42025-12-30Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Secur…
CVE-2025-69030Medium5.42025-12-30Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Acc…
CVE-2025-67515High8.82025-12-09Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP…
CVE-2025-66532Medium4.32025-12-09Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff…
CVE-2025-13157Medium5.32025-11-27The QODE Wishlist for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.7 via the 'q…
CVE-2025-12182Medium4.32025-11-15The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `resize_image_callback()` function in all vers…
CVE-2025-39467High8.12025-11-06Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a throug…
CVE-2025-39466High8.12025-11-06Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local…
CVE-2025-12180Medium4.32025-11-01The Qi Blocks plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.4.3. This is due to the plugin storing arbitr…
CVE-2025-64368Medium5.42025-10-31Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.
CVE-2025-8146Medium6.42025-08-02The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TypeOut Text widget in all versions up to, and i…
CVE-2025-6252Medium6.42025-06-28The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.9…
CVE-2025-49297High8.12025-06-09Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from…
CVE-2025-49296High8.12025-06-09Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through <…
CVE-2025-49295High8.12025-06-09Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a throug…
CVE-2025-39494High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP…
CVE-2025-39490High8.12025-05-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpa…
CVE-2025-39458High8.12025-05-19Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton foton allows PHP L…
CVE-2025-1627Medium5.42025-05-19The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is…
CVE-2025-1626Medium5.42025-05-19The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post where the…
CVE-2025-1625Medium5.42025-05-19The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the b…
CVE-2024-13699Medium6.42025-02-04The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘cursor’ parameter in all versions up to, and including…
CVE-2024-50457High7.52024-10-28Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qode Essential Addons qode-essent…
CVE-2024-49690High7.52024-10-23Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qi Blocks qi-blocks.This issue af…
CVE-2024-9530Medium4.32024-10-23The Qi Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.0 via private templa…
CVE-2024-38712Medium6.52024-07-20Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-blocks.This issue affects Qi Blocks: fr…
CVE-2024-4887High7.52024-06-07The Qi Addons For Elementor plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.7.2 via the 'behavior' attribute…
CVE-2024-5221Medium6.42024-06-06The Qi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's file uploader in all versions up to, and including, 1.2.9 due…
CVE-2024-4364Medium6.42024-06-06The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's button widgets in all versions up to, and includ…
CVE-2023-47679Medium6.42024-05-17Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QODE Interactive Qi Addons For Elementor allows PHP Local File…
CVE-2024-3309Medium6.42024-04-27The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown Widget's attributes in all versions up to, and…
CVE-2024-0826Medium6.42024-04-09The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 1…
CVE-2023-47840Critical9.92023-12-29Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: fro…
CVE-2023-47680Medium6.52023-11-14Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Qode Interactive Qi Addons For Elementor plugin <= 1.6.3 versions.
CVE-2023-40333High7.12023-09-27Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Qode Interactive Bridge Core plugin <= 3.0.9 versions.
CVE-2017-13138Medium6.12017-08-23DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary JavaScript.