Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
qi-blocks
WordPress
· Plugin
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter
CVE-2026-10096
qi-blocks
WordPress
Medium
Fix reported
2026-09-22
Qi Blocks <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-64383
qi-blocks
WordPress
Medium
Fix reported
2025-11-17
Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize
CVE-2025-12182
qi-blocks
WordPress
Medium
Fix reported
2025-11-15
Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update
CVE-2025-12180
qi-blocks
WordPress
Medium
Fix reported
2025-11-01
Qi Blocks <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Counter Block
CVE-2025-1625
qi-blocks
WordPress
Medium
Fix reported
2025-05-23
Qi Blocks <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ToC Block
CVE-2025-1627
qi-blocks
WordPress
Medium
Fix reported
2025-05-23
Qi Blocks <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Block
CVE-2025-1626
qi-blocks
WordPress
Medium
Fix reported
2025-05-23
Qi Blocks <= 1.3.2 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-49690
qi-blocks
WordPress
High
Fix reported
2024-10-30
Qi Blocks <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-38712
qi-blocks
WordPress
Medium
Fix reported
2024-07-17
Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-5221
qi-blocks
WordPress
Medium
Fix reported
2024-06-06
