Qode Essential Addons

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-50457 Oct 28, 20:15 HIGH This Week

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Qode Qode Essential Addons qode-essential-addons.6.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable. No vendor patch available.

PHP WordPress Information Disclosure LFI Qode Essential Addons +2

NVD VulDB

CVSS 3.1

7.5

EPSS

3.1%

CVE-2023-47840 Dec 29, 09:15 CRITICAL Act Now

Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.5.2. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 21.2% and no vendor patch available.

RCE Code Injection Qode Essential Addons Qodeinteractive

NVD

CVSS 3.1

9.9

EPSS

21.2%

CVE-2024-50457

EPSS 3% CVSS 7.5

HIGH This Week

PHP WordPress Information Disclosure +4

NVD VulDB

CVE-2023-47840

EPSS 21% CVSS 9.9

CRITICAL Act Now

RCE Code Injection Qode Essential Addons +1

NVD