WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
qi-addons-for-elementor
Published
2025-02-03
Title
Qi Addons For Elementor < 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qi-addons-for-elementor
Published
2025-06-27
Title
Qi Addons For Elementor < 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qi-addons-for-elementor
Published
2025-08-01
Title
Qi Addons for Elementor < 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget
Slug
qi-addons-for-elementor
Published
2026-09-17
Title
Qi Addons For Elementor < 1.11.1 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter
Slug
qi-addons-for-elementor
Published
2026-09-30
Title
Qi Addons For Elementor < 1.11.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qi-addons-for-elementor
Published
2026-10-23
Title
Qi Addons For Elementor < 1.11.2 - Contributor+ Content Injection via Animated Text Widget
Slug
qi-blocks
Published
2024-06-05
Title
Qi Blocks < 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
qi-blocks
Published
2024-07-11
Title
Qi Blocks < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qi-blocks
Published
2024-10-21
Title
Qi Blocks < 1.3.3 - Authenticated (Contributor+) Local File Inclusion
Slug
qi-blocks
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block
Slug
qi-blocks
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block
Slug
qi-blocks
Published
2025-04-28
Title
Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block
Slug
qi-blocks
Published
2025-10-31
Title
Qi Blocks < 1.4.4 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
Slug
qi-blocks
Published
2025-11-14
Title
Qi Blocks < 1.4.4 - Missing Authorization to Arbitrary Attachment Resize
Slug
qi-blocks
Published
2025-08-11
Title
Qi Blocks < 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
qi-blocks
Published
2026-06-30
Title
Qi Blocks < 1.5.0 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter
Slug
ql-cost-calculator
Published
2025-07-16
Title
Cost Calculator < 7.5 - Missing Authorization
Slug
ql-cost-calculator
Published
2025-08-06
Title
Cost Calculator < 7.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
qmean
Published
2025-01-16
Title
QMean – WordPress Did You Mean and Search Suggestion Like Google <= 2.0 - Reflected Cross-Site Scripting
Slug
qnotsquiz
Published
2025-10-23
Title
qnotsquiz <= 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
qode-essential-addons
Published
2023-11-27
Title
Qode Essential Addons < 1.5.3 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation/Activation
Slug
qode-essential-addons
Published
2024-10-24
Title
Qode Essential Addons < 1.6.4 - Authenticated (Contributor+) Local File Inclusion
Slug
qode-instagram-widget
Published
2019-10-21
Title
Bridge Theme < 18.2.1 - Open Redirect
Slug
qode-membership
Published
2026-10-26
Title
Qode Membership < 2.0.6.3 - Authentication Bypass via Social Login
Slug
qode-music
Published
2026-10-06
Title
Qode Music <= 2.1.8.2 - Unauthenticated Stored Cross-Site Scripting