Q
Vendor security profile
QODE
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical1
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
1
2
3
CVE KEV
CVE severity distribution
6toplam CVE
Critical1 (17%)
High3 (50%)
Medium2 (33%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
8.5
CVE-2026-42712
WordPress Qode Tours plugin <= 3.1.3.2 - SQL Injection vulnerability
Q
Patch status unknownEPSS %0
7.1
CVE-2026-42632
WordPress Qode Real Estate plugin <= 1.1.7.3 - Cross Site Scripting (XSS) vulnerability
Q
Patch status unknownEPSS %0
7.1
CVE-2026-42631
WordPress Qode Music plugin <= 2.1.8.2 - Cross Site Scripting (XSS) vulnerability
Q
Patch status unknownEPSS %0
6.5
CVE-2026-62079
WordPress Qi Addons For Elementor plugin <= 1.11 - Cross Site Scripting (XSS) vulnerability
Q
Patch status unknownEPSS %0
6.1
CVE-2026-92249
Qi Addons For Elementor <= 1.11 - Reflected DOM-Based Cross-Site Scripting via 's' Parameter
Q
Patch status unknownEPSS %0
6.4
CVE-2026-15609
Bridge - Creative Multipurpose WordPress Theme <= 30.8.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'circle_line' Shortcode Attribute
Q
Patch status unknownEPSS %0
9.3
CVE-2026-65546
WordPress Qode Tours plugin <= 3.1.3.1 - SQL Injection vulnerability
Q
Patch status unknownEPSS %0
8.1
CVE-2025-67937
Vulnerability in Qodeinteractive Hendon
Q
Patch status unknownEPSS %0
8.1
CVE-2025-67936
Vulnerability in Qodeinteractive Curly
Q
Patch status unknownEPSS %0
8.1
CVE-2025-67935
Vulnerability in Qodeinteractive Optimize
Q
Patch status unknownEPSS %0