{"items":[{"id":"CVE-2026-121516","published":"2026-11-07T03:28:06.951Z","updated":"2026-11-07T03:28:06.951Z","title":"QODE Wishlist for WooCommerce <= 1.2.9 - Unauthenticated Stored Cross-Site Scripting via 'table_title' Shared Wishlist Field via Guest Cookie","severity":"MEDIUM","score":6.1,"vendor":"qodeinteractive","product":"QODE Wishlist for WooCommerce","kev":false,"epss":null,"kevAdded":null},{"id":"CVE-2026-92249","published":"2026-09-18T07:40:05.277Z","updated":"2026-09-19T14:21:51.279Z","title":"Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter","severity":"MEDIUM","score":6.1,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.00368,"kevAdded":null},{"id":"CVE-2026-10096","published":"2026-07-01T07:53:37.118Z","updated":"2026-07-01T10:32:04.339Z","title":"Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter","severity":"MEDIUM","score":4.3,"vendor":"qodeinteractive","product":"Qi Blocks","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2025-13157","published":"2025-11-27T06:42:13.311Z","updated":"2026-04-08T17:16:14.208Z","title":"QODE Wishlist for WooCommerce <= 1.2.7 - Unauthenticated Insecure Direct Object Reference to Wishlist Update","severity":"MEDIUM","score":5.3,"vendor":"qodeinteractive","product":"QODE Wishlist for WooCommerce","kev":false,"epss":0.00281,"kevAdded":null},{"id":"CVE-2025-12182","published":"2025-11-15T03:27:01.199Z","updated":"2026-04-08T16:48:45.900Z","title":"Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize","severity":"MEDIUM","score":4.3,"vendor":"qodeinteractive","product":"Qi Blocks","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2025-12180","published":"2025-11-01T05:40:21.834Z","updated":"2026-04-08T16:49:00.673Z","title":"Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update","severity":"MEDIUM","score":4.3,"vendor":"qodeinteractive","product":"Qi Blocks","kev":false,"epss":0.00234,"kevAdded":null},{"id":"CVE-2025-8146","published":"2025-08-02T04:24:11.591Z","updated":"2026-04-08T16:52:09.419Z","title":"Qi Addons for Elementor <= 1.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via TypeOut Text Widget","severity":"MEDIUM","score":6.4,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.0029,"kevAdded":null},{"id":"CVE-2025-6252","published":"2025-06-28T04:21:32.752Z","updated":"2026-04-08T16:35:36.134Z","title":"Qi Addons For Elementor <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.00261,"kevAdded":null},{"id":"CVE-2024-13699","published":"2025-02-04T12:22:21.237Z","updated":"2026-04-08T17:15:12.941Z","title":"Qi Addons For Elementor <= 1.8.7 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.00372,"kevAdded":null},{"id":"CVE-2024-9530","published":"2024-10-23T07:34:54.225Z","updated":"2026-04-08T16:35:21.406Z","title":"Qi Addons For Elementor <= 1.8.0 - Sensitive Information Exposure","severity":"MEDIUM","score":4.3,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.00401,"kevAdded":null},{"id":"CVE-2024-4887","published":"2024-06-07T03:21:56.432Z","updated":"2026-04-08T16:43:06.100Z","title":"Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Local File Inclusion","severity":"HIGH","score":7.5,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.00631,"kevAdded":null},{"id":"CVE-2024-5221","published":"2024-06-06T08:33:04.612Z","updated":"2026-04-08T17:19:04.570Z","title":"Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"qodeinteractive","product":"Qi Blocks","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2024-4364","published":"2024-06-06T03:32:49.695Z","updated":"2026-04-08T16:33:36.770Z","title":"Qi Addons For Elementor <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button Widget","severity":"MEDIUM","score":6.4,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.00329,"kevAdded":null},{"id":"CVE-2024-3309","published":"2024-04-27T09:37:56.084Z","updated":"2026-04-08T17:28:57.363Z","title":"Qi Addons For Elementor <= 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown widget","severity":"MEDIUM","score":6.4,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.0032,"kevAdded":null},{"id":"CVE-2024-0826","published":"2024-04-09T18:58:44.788Z","updated":"2026-04-08T16:48:27.742Z","title":"Qi Addons For Elementor <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting","severity":"MEDIUM","score":6.4,"vendor":"qodeinteractive","product":"Qi Addons For Elementor","kev":false,"epss":0.00602,"kevAdded":null}]}