Plugin icon

Qi Blocks

qi-blocks

Vulnerabilities:

9

Last Updated:

March 24, 2026

Active Installs:

60000

Published
Title
Fixed in
CVSS
Published
2025-11-14
Title
Qi Blocks < 1.4.4 - Missing Authorization to Arbitrary Attachment Resize
Fixed in
Fixed in 1.4.4
CVSS
4.3 (medium)
Published
2025-10-31
Title
Qi Blocks < 1.4.4 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
Fixed in
Fixed in 1.4.4
CVSS
4.3 (medium)
Published
2025-08-11
Title
Qi Blocks < 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.4.4
CVSS
6.4 (medium)
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block
Fixed in
Fixed in 1.4
CVSS
5.9 (medium)
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block
Fixed in
Fixed in 1.4
CVSS
5.9 (medium)
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block
Fixed in
Fixed in 1.4
CVSS
5.9 (medium)
Published
2024-10-21
Title
Qi Blocks < 1.3.3 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 1.3.3
CVSS
8.8 (high)
Published
2024-07-11
Title
Qi Blocks < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.1
CVSS
6.4 (medium)
Published
2024-06-05
Title
Qi Blocks < 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.3.0
CVSS
6.4 (medium)