Qodeinteractive
Vulnerability activity for Qodeinteractive: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 0
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 1
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 12
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 6.1MediumSep 18, 2026Qodeinteractive Qi Addons For Elementor XSSCVE-2026-92249The Qi Addons For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 1.11 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires the Table of Contents widget to be placed on a template that renders on the WordPress search-results
- 8.1HighJan 8, 2026Qodeinteractive hendon Path traversal / file handlingCVE-2025-67937Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows PHP Local File Inclusion.This issue affects Hendon: from n/a through < 1.7.
- 8.1HighJan 8, 2026Qodeinteractive curly Path traversal / file handlingCVE-2025-67936Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP Local File Inclusion.This issue affects Curly: from n/a through < 3.3.
- 8.1HighJan 8, 2026Qodeinteractive optimize Path traversal / file handlingCVE-2025-67935Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allows PHP Local File Inclusion.This issue affects Optimize: from n/a through < 2.4.
- 8.1HighJan 8, 2026Qodeinteractive wellspring Path traversal / file handlingCVE-2025-67934Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring allows PHP Local File Inclusion.This issue affects Wellspring: from n/a through < 2.8.
- 8.1HighDec 30, 2025Qodeinteractive lekker Path traversal / file handlingCVE-2025-69034Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP Local File Inclusion.This issue affects Lekker: from n/a through <= 1.8.
- 5.4MediumDec 30, 2025Qodeinteractive fivestar Auth bypass / access controlCVE-2025-69032Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiveStar: from n/a through <= 1.7.
- 5.4MediumDec 30, 2025Qodeinteractive backpack traveler Auth bypass / access controlCVE-2025-69030Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through <= 2.10.3.
- 8.8HighDec 9, 2025Qodeinteractive wilmer Path traversal / file handlingCVE-2025-67515Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a through < 3.5.
- 4.3MediumDec 9, 2025Qodeinteractive powerlift Auth bypass / access controlCVE-2025-66532Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through < 3.2.1.
- 8.1HighNov 6, 2025Qodeinteractive wanderland Path traversal / file handlingCVE-2025-39467Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1.
- 8.1HighNov 6, 2025Qodeinteractive dor Path traversal / file handlingCVE-2025-39466Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.
Top products
- wilmer1 CVE in the last year
- wellspring1 CVE in the last year
- wanderland1 CVE in the last year
- Qi Addons For Elementor1 CVE in the last year
- powerlift1 CVE in the last year
- optimize1 CVE in the last year
- lekker1 CVE in the last year
- hendon1 CVE in the last year
- fivestar1 CVE in the last year
- dor1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.