CVE-2024-49690

CVE-2024-49690 is a Local File Inclusion vulnerability in WordPress Qi Blocks (Qi Blocks)

CVE-2024-5221

The CVE-2024-5221 entry concerns the Qi Blocks WordPress plugin. Public records here show a Stored XSS vulnerability in the plugin’s file uploader affecting all versions up to and including 1.2.9, caused by insufficient input sanitization and output escaping. Exploitation requires authentication ...

CVE-2024-38712

CVE-2024-38712 affects Qode Interactive Qi Blocks (WordPress) up to version 1.3. The issue is a Stored XSS caused by improper input neutralization during web page generation, allowing attacker-supplied script to be stored and later executed in users’ browsers. Exploitation details and patch/versi...

CVE-2025-1625

The Qi Blocks WordPress plugin (versions prior to 1.4 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly validate and escape certain Counter block options before they are outputted in a page or post where the block is embedded. This allows use...

CVE-2025-1627

The Qi Blocks WordPress plugin (versions prior to 1.4 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the failure to properly validate and escape certain block options before they are outputted in a page or post where the block is embedded. This flaw allows users with con...

CVE-2025-1626

The Qi Blocks WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 1.4 . The root cause is the failure to validate and escape certain Countdown block options before they are rendered in a page or post. This flaw allows users with contributor roles and above to ...