Qi Blocks — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Qi Blocks, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-10096	Qi Blocks <= 1.4.9 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Style Modification via 'page_id' Parameter CWE-639	4.3	Medium	2026-07-01
CVE-2025-12182	Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize CWE-284	4.3	Medium	2025-11-15
CVE-2025-64383	WordPress Qi Blocks plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2025-11-13
CVE-2025-12180	Qi Blocks <= 1.4.3 - Missing Authorization to Authenticated (Contributor+) Plugin Settings Update CWE-862	4.3	Medium	2025-11-01
CVE-2025-1627	Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block	5.4^AI	Medium ^AI	2025-05-19
CVE-2025-1626	Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block	5.4^AI	Medium ^AI	2025-05-19
CVE-2025-1625	Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block	5.4^AI	Medium ^AI	2025-05-19
CVE-2024-49690	WordPress Qi Blocks plugin <= 1.3.2 - Local File Inclusion vulnerability CWE-98	7.5	High	2024-10-23
CVE-2024-38712	WordPress Qi Blocks plugin <= 1.3 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2024-07-20
CVE-2024-5221	Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2024-06-06

All 10 known CVE vulnerabilities affecting Qi Blocks with full Chinese analysis, references, and POCs where available.