← Back

Qodeinteractive

qodeinteractive

37 CVEs • 21 products

Products (21)

Click to collapse
Toggle
Qi Addons For Elementor
qi_addons_for_elementor
9 CVEs
Qi Blocks
qi_blocks
6 CVEs
Qode Essential Addons
qode_essential_addons
2 CVEs
Backpack Traveler
backpack_traveler
2 CVEs
Wilmer
wilmer
2 CVEs
Bridge
bridge
1 CVE
Bridge Core
bridge_core
1 CVE
Foton
foton
1 CVE
Mediclinic
mediclinic
1 CVE
Grandprix
grandprix
1 CVE
Grill And Chow
grill_and_chow
1 CVE
Bard
bard
1 CVE
Dor
dor
1 CVE
Wanderland
wanderland
1 CVE
Powerlift
powerlift
1 CVE
Fivestar
fivestar
1 CVE
Lekker
lekker
1 CVE
Wellspring
wellspring
1 CVE
Optimize
optimize
1 CVE
Curly
curly
1 CVE
Hendon
hendon
1 CVE

CVEs (37)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-67937
1Qodeinteractive
1Hendon
Jun 17, 2026
Jan 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows PHP Local File Inclusion.This issue affects Hendon: from n/a thr...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Hendon hendon allows PHP Local File Inclusion.This issue affects Hendon: from n/a through < 1.7.Show less
CVE-2025-67936
1Qodeinteractive
1Curly
Jun 17, 2026
Jan 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP Local File Inclusion.This issue affects Curly: from n/a throug...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Curly curly allows PHP Local File Inclusion.This issue affects Curly: from n/a through < 3.3.Show less
CVE-2025-67935
1Qodeinteractive
1Optimize
Jun 17, 2026
Jan 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allows PHP Local File Inclusion.This issue affects Optimize: from...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Optimize optimizewp allows PHP Local File Inclusion.This issue affects Optimize: from n/a through < 2.4.Show less
CVE-2025-67934
1Qodeinteractive
1Wellspring
Jun 17, 2026
Jan 8, 2026
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring allows PHP Local File Inclusion.This issue affects Wellspring:...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wellspring wellspring allows PHP Local File Inclusion.This issue affects Wellspring: from n/a through < 2.8.Show less
CVE-2025-69034
1Qodeinteractive
1Lekker
Jun 17, 2026
Dec 30, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP Local File Inclusion.This issue affects Lekker: from n/a thr...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Lekker lekker allows PHP Local File Inclusion.This issue affects Lekker: from n/a through <= 1.8.Show less
CVE-2025-69032
1Qodeinteractive
1Fivestar
Jun 17, 2026
Dec 30, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiveStar: from n/a through <= 1...Show more
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiveStar: from n/a through <= 1.7.Show less
CVE-2025-69030
1Qodeinteractive
1Backpack Traveler
Jun 17, 2026
Dec 30, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Trave...Show more
Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through <= 2.10.3.Show less
CVE-2025-67515
1Qodeinteractive
1Wilmer
Jun 17, 2026
Dec 9, 2025
N/A· v4
8.8 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a thr...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a through < 3.5.Show less
CVE-2025-66532
1Qodeinteractive
1Powerlift
Jun 17, 2026
Dec 9, 2025
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through < 3.2.1.
CVE-2025-39467
1Qodeinteractive
1Wanderland
Jun 17, 2026
Nov 6, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1.
CVE-2025-39466
1Qodeinteractive
1Dor
Jun 17, 2026
Nov 6, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Dør dor allows PHP Local File Inclusion.This issue affects Dør: from n/a through <= 2.4.Show less
CVE-2025-64368
1Qodeinteractive
1Bard
Jun 17, 2026
Oct 31, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-Site Request Forgery (CSRF) vulnerability in Mikado-Themes Bard bardwp allows Cross Site Request Forgery.This issue affects Bard: from n/a through <= 1.6.
CVE-2025-6252
1Qodeinteractive
1Qi Addons For Elementor
Jun 17, 2026
Jun 28, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping....Show more
The Qi Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.Show less
CVE-2025-49297
1Qodeinteractive
1Grill And Chow
Jun 17, 2026
Jun 9, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from n/a through <= 1.6.
CVE-2025-49296
1Qodeinteractive
1Grandprix
Jun 17, 2026
Jun 9, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through <= 1.6.
CVE-2025-49295
1Qodeinteractive
1Mediclinic
Jun 17, 2026
Jun 9, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a through <= 2.1.
CVE-2025-39494
1Qodeinteractive
1Wilmer
Jun 17, 2026
May 23, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a thr...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Wilmër wilmer allows PHP Local File Inclusion.This issue affects Wilmër: from n/a through < 3.4.2.Show less
CVE-2025-39490
1Qodeinteractive
1Backpack Traveler
Jun 17, 2026
May 23, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows PHP Local File Inclusion.This issue affects Backpack Traveler: from n/a through <= 2.10.2.Show less
CVE-2025-39458
1Qodeinteractive
1Foton
Jun 17, 2026
May 19, 2025
N/A· v4
8.1 HIGH· v3
N/A· v2
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton foton allows PHP Local File Inclusion.This issue affects Foton: from n/a throug...Show more
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Foton foton allows PHP Local File Inclusion.This issue affects Foton: from n/a through <= 2.5.2.Show less
CVE-2025-1627
1Qodeinteractive
1Qi Blocks
Jun 17, 2026
May 19, 2025
N/A· v4
5.4 MEDIUM· v3
N/A· v2
The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and...Show more
The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.Show less