Qode Interactive vulnerabilities
We track 3 vulnerabilities in Qode Interactive products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 27, 2025.
Latest Qode Interactive vulnerabilities
- 9.8 Critical severity
Tiare Membership: Improper Privilege Management
The Tiare Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2. This is due to the 'tiare_membership_init_rest_api_register' function not restricting what user roles a user can register with. This make
- 8.8 High severity
Qi Addons For Elementor: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in QODE Interactive Qi Addons For Elementor allows PHP Local File Inclusion.This issue affects Qi Addons For Elementor: from n/a through 1.6.3.
- 8.8 High severity
Qode Essential Addons: Improper Control of Generation of Code
Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: from n/a through 1.5.2.