Qqodeinteractive

Products

Exploited and recent CVEs

• CVE-2026-121516 Medium 6.1 QODE Wishlist for WooCommerce <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest Cookie –
• CVE-2026-92249 Medium 6.1 Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter 0.4%
• CVE-2026-10096 Medium 4.3 Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter 0.3%
• CVE-2025-13157 Medium 5.3 QODE Wishlist for WooCommerce <= 1.2.7 - Unauthenticated Insecure Direct Object Reference to Wishlist Update 0.3%
• CVE-2025-12182 Medium 4.3 Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize 0.2%
• CVE-2025-12180 Medium 4.3 Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update 0.2%
• CVE-2025-8146 Medium 6.4 Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget 0.3%
• CVE-2025-6252 Medium 6.4 Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2024-13699 Medium 6.4 Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2024-9530 Medium 4.3 Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure 0.4%
• CVE-2024-4887 High 7.5 Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion 0.6%
• CVE-2024-5221 Medium 6.4 Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting 0.3%
• CVE-2024-4364 Medium 6.4 Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget 0.3%
• CVE-2024-3309 Medium 6.4 Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget 0.3%
• CVE-2024-0826 Medium 6.4 Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.6%