Medium 4.3
2025-11-15< 1.4.4
CVE-2025-12182
Minimum safe version
1.4.4
Update to 1.4.4 or later to address 9 fixable vulnerabilities
CVE-2025-12182
CVE-2025-64383
CVE-2025-12180
Qi Blocks <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ToC Block
Qi Blocks <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Block
WordPress Qi Blocks Plugin < 1.4 is vulnerable to Cross Site Scripting (XSS)
CVE-2024-49690
CVE-2024-38712
CVE-2024-5221