Skip to content
Noroxi

qodeinteractive records

37 published records for vendor qodeinteractive.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
64.9%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 23
  3. 24
  4. 25
  5. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

37 records
  • CVE-2025-39494
    39Monitor

    WordPress Wilmër theme < 3.4.2 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    qodeinteractive · wilmerMay 23, 2025

  • CVE-2025-49295
    39Monitor

    WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    qodeinteractive · mediclinicJun 9, 2025

  • CVE-2025-49297
    39Monitor

    WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    qodeinteractive · grill and chowJun 9, 2025

  • CVE-2025-49296
    39Monitor

    WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    qodeinteractive · grandprixJun 9, 2025

  • CVE-2023-47840
    35Monitor

    WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)

    HighCVSS 8.8Proof of conceptEPSS 1%

    qodeinteractive · qode essential addonsDec 29, 2023

  • CVE-2024-50457
    35Monitor

    WordPress Qode Essential Addons plugin <= 1.6.3 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    qodeinteractive · qode essential addonsOct 28, 2024

  • CVE-2024-49690
    35Monitor

    WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    qodeinteractive · qi blocksOct 23, 2024

  • CVE-2023-47679
    35Monitor

    WordPress Qi Addons For Elementor plugin <= 1.6.3 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    qodeinteractive · qi addons for elementorMay 17, 2024

  • CVE-2025-67515
    35Monitor

    WordPress Wilmër theme < 3.5 - Local File Inclusion vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    qodeinteractive · wilmerDec 9, 2025

  • CVE-2025-39490
    32Monitor

    WordPress Backpack Traveler theme <= 2.10.2 - Local File Inclusion Vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    qodeinteractive · backpack travelerMay 23, 2025

  • CVE-2025-39458
    32Monitor

    WordPress Foton theme <= 2.5.2 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    qodeinteractive · fotonMay 19, 2025

  • CVE-2025-39466
    32Monitor

    WordPress Dør theme <= 2.4 - Local File Inclusion Vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    qodeinteractive · dorNov 6, 2025

  • CVE-2025-39467
    32Monitor

    WordPress Wanderland theme <= 1.7.1 - Local File Inclusion Vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    qodeinteractive · wanderlandNov 6, 2025

  • CVE-2025-67934
    32Monitor

    WordPress Wellspring theme < 2.8 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    qodeinteractive · wellspringJan 8, 2026

  • CVE-2025-67935
    32Monitor

    WordPress Optimize theme < 2.4 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    qodeinteractive · optimizeJan 8, 2026

  • CVE-2025-67936
    32Monitor

    WordPress Curly theme < 3.3 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    qodeinteractive · curlyJan 8, 2026

  • CVE-2025-67937
    32Monitor

    WordPress Hendon theme < 1.7 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    qodeinteractive · hendonJan 8, 2026

  • CVE-2025-69034
    32Monitor

    WordPress Lekker theme <= 1.8 - Local File Inclusion vulnerability

    HighCVSS 8.1No exploitEPSS 0%

    qodeinteractive · lekkerDec 30, 2025

  • CVE-2024-4887
    30Monitor

    Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion

    HighCVSS 7.5No exploitEPSS 1%

    qodeinteractive · qi addons for elementorJun 7, 2024

  • CVE-2017-13138
    24Monitor

    DOM based Cross-site scripting (XSS) vulnerability in the Bridge theme before 11.2 for WordPress allows remote attackers to inject arbitrary

    MediumCVSS 6.1No exploitEPSS 1%

    qodeinteractive · bridgeAug 23, 2017

  • CVE-2023-40333
    24Monitor

    WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    qodeinteractive · bridge coreSep 27, 2023

  • CVE-2024-0826
    21Monitor

    Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 1%

    qodeinteractive · qi addons for elementorApr 9, 2024

  • CVE-2023-47680
    21Monitor

    WordPress Qi Addons For Elementor Plugin <= 1.6.3 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    qodeinteractive · qi addons for elementorNov 13, 2023

  • CVE-2024-13699
    21Monitor

    Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    MediumCVSS 5.4No exploitEPSS 0%

    qodeinteractive · qi addons for elementorFeb 4, 2025

  • CVE-2024-4364
    21Monitor

    Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget

    MediumCVSS 5.4No exploitEPSS 0%

    qodeinteractive · qi addons for elementorJun 6, 2024