Description
Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QODE | Qode Tours | ≤ 3.1.3.2 | — |
High · 8.5
CVE-2026-42712
EUVD-2026-96446GHSA-2c9c-5f7m-8fpr
WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack