QODE vulnerabilities

CVEs per yearBy the year they were published

1. 20245
2. 20251
3. 20266

Newest CVEs

• CVE-2026-42712

  WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

  QODE · Qode Tours

  High8.5
• CVE-2026-42632

  WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability

  QODE · Qode Real Estate

  High7.1
• CVE-2026-42631

  WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability

  QODE · Qode Music

  High7.1
• CVE-2026-62079

  WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability

  Qode · Qi Addons For Elementor

  Medium6.5
• CVE-2026-15609

  Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute

  QODE · Bridge - Creative Multipurpose WordPress Theme

  Medium6.4
• CVE-2026-65546

  WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

  QODE · Qode Tours

  Critical9.3
• CVE-2025-64383

  WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

  Qode · Qi Blocks

  Medium6.5
• CVE-2024-50457

  WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability

  Qode · Qode Essential Addons

  High7.5
• CVE-2024-49690

  WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability

  Qode · Qi Blocks

  High7.5
• CVE-2024-9860

  Bridge Core <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Demo Import

  QODE · Bridge Core

  Medium5.4