What’s Vulnerable › Products

qodeinteractive Qi Blocks vulnerabilities

10 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your qodeinteractive Qi Blocks version is affected

Latest qodeinteractive Qi Blocks vulnerabilities

• CVE-2026-10096 — Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter (CVSS 4.3)
• CVE-2025-12182 — Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize (CVSS 4.3)
• CVE-2025-64383 — WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-12180 — Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update (CVSS 4.3)
• CVE-2025-1627 — Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block (CVSS 5.4)
• CVE-2025-1626 — Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block (CVSS 5.4)
• CVE-2025-1625 — Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block (CVSS 5.4)
• CVE-2024-49690 — WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability (CVSS 8.8)
• CVE-2024-38712 — WordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-5221 — Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 5.4)