Qode Themes vulnerabilities

Products

• Qode Membership 1

Latest Qode Themes CVEs

Newest publication first

1. CVE-2026-92885 Qode Membership <= 2.0.6.2 - Authentication Bypass via Social Login

   Published 2026-10-27

   Critical·CVSS 9.8 EPSS 0.37%

   The Qode Membership plugin for WordPress is vulnerable to Authentication Bypass leading to Account Takeover in all versions up to, and including, 2.0.6.2 via the qode_membership_check_facebook_user AJAX action. This is due to a typographic error in the Facebook OAuth token verifi...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.