QODE
Vulnerability activity for QODE: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 3
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 5
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 8.5HighOct 10, 2026Qode Tours SQL injectionCVE-2026-42712Subscriber SQL Injection in Qode Tours <= 3.1.3.2 versions.
- 7.1HighOct 10, 2026Qode Real Estate XSSCVE-2026-42632Unauthenticated Cross Site Scripting (XSS) in Qode Real Estate <= 1.1.7.3 versions.
- 7.1HighOct 10, 2026Qode Music XSSCVE-2026-42631Unauthenticated Cross Site Scripting (XSS) in Qode Music <= 2.1.8.2 versions.
- 6.5MediumSep 30, 2026Qode Qi Addons For Elementor XSSCVE-2026-62079Contributor Cross Site Scripting (XSS) in Qi Addons For Elementor <= 1.11 versions.
- 6.4MediumSep 15, 2026QODE Bridge - Creative Multipurpose WordPress Theme XSSCVE-2026-15609The Bridge - Creative Multipurpose WordPress Theme theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute in all versions up to, and including, 30.8.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Top products
- Qode Tours1 CVE in the last year
- Qode Real Estate1 CVE in the last year
- Qode Music1 CVE in the last year
- Qi Addons For Elementor1 CVE in the last year
- Bridge - Creative Multipurpose WordPress Theme1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.