Skip to content
OpenAdvisories

Vendor

QODE

12 known vulnerabilities.

Products

Qi Blocks 3 Qode Tours 2 Bridge Core 2 Qode Essential Addons 1 Qode Music 1 Bridge - Creative Multipurpose WordPress Theme 1 Qode Real Estate 1 Qi Addons For Elementor 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.5
    CVE-2026-42712

    WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

    Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

    QODE Qode Tours
  • High 7.1
    CVE-2026-42632

    WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.

    QODE Qode Real Estate
  • High 7.1
    CVE-2026-42631

    WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability

    Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.

    QODE Qode Music
  • High 7.5
    CVE-2024-50457

    WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qode Essential Addons qode-essential-addons.This issue affects Qode Essential Addons: from n/a through <= 1.6.3.

    QODE Qode Essential Addons
  • High 7.5
    CVE-2024-49690

    WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qi Blocks qi-blocks.This issue affects Qi Blocks: from n/a through <= 1.3.2.

    QODE Qi Blocks