Qode vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Qode products: 4 record(s), with severity, exploitation and fixes.

Qode Music 1 Qode Real Estate 1 Qode Tours 1 Qi Blocks 1

Exploited only (KEV) →

CVE-2026-42712 High · 8.5 CWE-89 Oct 10, 2026

WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.

CVE-2026-42632 High · 7.1 CWE-79 Oct 10, 2026

WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.

CVE-2026-42631 High · 7.1 CWE-79 Oct 10, 2026

WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.

CVE-2025-64383 Medium · 6.5 CWE-79 Nov 13, 2025

WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Qode Qi Blocks qi-blocks allows Stored XSS.This issue affects Qi Blocks: from n/a through <= 1.4.3.