qodeinteractive Qi Blocks vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20252
3. 20261

Newest CVEs

• CVE-2026-10096

  Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter

  qodeinteractive · Qi Blocks

  Medium4.3
• CVE-2025-12182

  Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize

  qodeinteractive · Qi Blocks

  Medium4.3
• CVE-2025-12180

  Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update

  qodeinteractive · Qi Blocks

  Medium4.3
• CVE-2024-5221

  Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting

  qodeinteractive · Qi Blocks

  Medium6.4