Medium · 6.4 CVE-2023-47679 EUVD-2023-51777GHSA-4ghh-5wcp-69w2

WordPress Qi Addons For Elementor plugin <= 1.6.3 - Local File Inclusion vulnerability

Published May 17, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Qode Interactive Product: Qi Addons For Elementor

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QODE Interactive Qi Addons For Elementor allows PHP Local File Inclusion.This issue affects Qi Addons For Elementor: from n/a through 1.6.3.

Affected products

Vendor	Product	Affected	Fixed
QODE Interactive	Qi Addons For Elementor	≤ 1.6.3	—

References

https://patchstack.com/database/vulnerability/qi-addons-for-elementor/wordpress-qi-addons-for-elementor-plugin-1-6-3-local-file-inclusion-vulnerability?_s_id=cve vdb-entry