CVE-2026-42712

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

CVE-2026-42712

The Qode Tours WordPress plugin (versions

CVE-2026-42712 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

EUVD-2026-96446

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

PT-2026-109777

Name of the Vulnerable Software and Affected Versions Qode Tours versions prior to 3.1.3.3 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database...

CVE-2026-42712: Improper Neutralization of Special Elements used in an SQL Command

Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...

WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Tours versions = 3.1.3.2...

CVE-2026-65546

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

CVE-2026-65546 WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

EUVD-2026-53976

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

CVE-2026-65546

CVE-2026-65546 affects the WordPress plugin Qode Tours (versions

CVE-2026-65546

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

CVE-2026-65546: Improper Neutralization of Special Elements used in an SQL Command

Unauthenticated SQL Injection in Qode Tours = 3.1.3.1 versions...

WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Bonds in WordPress Plugin Qode Tours versions = 3.1.3.1...

PT-2026-68547

Name of the Vulnerable Software and Affected Versions Qode Tours versions prior to 3.1.3.2 Description The Qode Tours plugin for WordPress contains a flaw allowing unauthenticated attackers to execute SQL Injection. This occurs due to insufficient escaping of user-supplied parameters and a lack o...