108 matches found
CVE-2026-42712
Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...
CVE-2026-42631
Unauthenticated Cross Site Scripting XSS in Qode Music = 2.1.8.2 versions...
CVE-2026-42632
Unauthenticated Cross Site Scripting XSS in Qode Real Estate = 1.1.7.3 versions...
EUVD-2026-96446
Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...
CVE-2026-42712 WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
Subscriber SQL Injection in Qode Tours = 3.1.3.2 versions...
CVE-2026-42712
The Qode Tours WordPress plugin (versions
EUVD-2026-96434
Unauthenticated Cross Site Scripting XSS in Qode Real Estate = 1.1.7.3 versions...
CVE-2026-42632 WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Qode Real Estate = 1.1.7.3 versions...
CVE-2026-42632
The Qode Real Estate WordPress plugin (versions
CVE-2026-42631 WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability
Unauthenticated Cross Site Scripting XSS in Qode Music = 2.1.8.2 versions...
EUVD-2026-96433
Unauthenticated Cross Site Scripting XSS in Qode Music = 2.1.8.2 versions...
CVE-2026-42631
The Qode Music WordPress plugin (versions
CVE-2023-47840
CVE-2023-47840 Qode Essential Addons = 1.5.2 - Missing Authorization to Authenticated Subscriber+ Arbitrary Plugin Installation/Activation Description: The Qode Essential Addons plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the...
PT-2026-109765
Name of the Vulnerable Software and Affected Versions Qode Real Estate versions prior to 1.1.7.4 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...
PT-2026-109764
Name of the Vulnerable Software and Affected Versions Qode Music versions prior to 2.1.8.3 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication. Recommendations...
PT-2026-109777
Name of the Vulnerable Software and Affected Versions Qode Tours versions prior to 3.1.3.3 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the database...
WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Tours versions = 3.1.3.2...
WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Music versions = 2.1.8.2...
WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by Rafie Muhammad in WordPress Plugin Qode Real Estate versions = 1.1.7.3...