Search Results (43 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2023-47840 1 Qodeinteractive 1 Qode Essential Addons 2024-11-21 9.9 Critical
Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.
CVE-2023-40333 1 Qodeinteractive 1 Bridge Core 2024-11-21 7.1 High
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Qode Interactive Bridge Core plugin <= 3.0.9 versions.
CVE-2024-9530 1 Qodeinteractive 1 Qi Addons For Elementor 2024-10-25 4.3 Medium
The Qi Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.0 via private templates. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private.