QODE

Products

Product	CVEs	Exploited	Latest
Qi Blocks	3	–	Nov 13, 2025
Bridge Core	2	–	Oct 12, 2024
Qode Tours	2	–	Oct 10, 2026
Bridge - Creative Multipurpose WordPress Theme	1	–	Sep 15, 2026
Qode Essential Addons	1	–	Oct 28, 2024
Qode Music	1	–	Oct 10, 2026
Qode Real Estate	1	–	Oct 10, 2026
Qi Addons For Elementor	1	–	Sep 30, 2026

CVE-2026-42712 High 8.5 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability 0.3%
CVE-2026-42632 High 7.1 WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-42631 High 7.1 WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-62079 Medium 6.5 WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2026-15609 Medium 6.4 Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute 0.3%
CVE-2026-65546 Critical 9.3 WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability 0.4%
CVE-2025-64383 Medium 6.5 WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability 0.2%
CVE-2024-50457 High 7.5 WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability 0.6%
CVE-2024-49690 High 7.5 WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability 0.6%
CVE-2024-9860 Medium 5.4 Bridge Core <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Demo Import 0.3%
CVE-2024-9292 Medium 6.4 Bridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
CVE-2024-38712 Medium 6.5 WordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability 0.3%