QO
Vendor
QODE
12
CVEs
0
On KEV
4
New 30D
Products
QT9.3
Qode Tours
QODE
2 CVEs0 on KEV1 new
QA6.5
Qi Addons For Elementor
Qode
1 CVEs0 on KEV1 new
QM7.1
Qode Music
QODE
1 CVEs0 on KEV1 new
QR7.1
Qode Real Estate
QODE
1 CVEs0 on KEV1 new
QB8.8
Qi Blocks
Qode
3 CVEs0 on KEV0 new
BC6.4
Bridge Core
QODE
2 CVEs0 on KEV0 new
BC6.4
Bridge - Creative Multipurpose WordPress Theme
QODE
1 CVEs0 on KEV0 new
QE8.8
Qode Essential Addons
Qode
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-42712 | QT Qode Tours QODE | 8.5 | Oct 10 | WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability |
| CVE-2026-42632 | QR Qode Real Estate QODE | 7.1 | Oct 10 | WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-42631 | QM Qode Music QODE | 7.1 | Oct 10 | WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-62079 | QA Qi Addons For Elementor Qode | 6.5 | Sep 30 | WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-15609 | BC Bridge - Creative Multipurpose WordPress Theme QODE | 6.4 | Sep 15 | Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute |
| CVE-2026-65546 | QT Qode Tours QODE | 9.3 | Aug 6 | WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability |
| CVE-2025-64383 | QB Qi Blocks Qode | 6.5 | Nov 13 | WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-50457 | QE Qode Essential Addons Qode | 8.8 | Oct 28 | WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability |
| CVE-2024-49690 | QB Qi Blocks Qode | 8.8 | Oct 23 | WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability |
| CVE-2024-9860 | BC Bridge Core QODE | 5.4 | Oct 12 | Bridge Core <= 3.3 - Missing Authorization to Authenticated (Subscriber+) Demo Import |
| CVE-2024-9292 | BC Bridge Core QODE | 6.4 | Oct 8 | Bridge Core <= 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-38712 | QB Qi Blocks Qode | 5.4 | Jul 20 | WordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability |