Plugin icon

If-So Dynamic Content – Elementor & All Page Builders Personalization

if-so

Vulnerabilities:

13

Last Updated:

October 16, 2026

Active Installs:

7000

Published
Title
Fixed in
CVSS
Published
2026-10-05
Title
If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' Parameter
Fixed in
Fixed in 1.10.2
CVSS
7.1 (high)
Published
2026-09-30
Title
If-So Dynamic Content – Elementor & All Page Builders Personalization < 1.10.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.10.2
CVSS
7.2 (high)
Published
2026-09-29
Title
If-So Dynamic Content 1.8 - 1.10.1 - Reflected XSS via render_ifso_shortcodes
Fixed in
Fixed in 1.10.2
CVSS
4.7 (medium)
Published
2026-09-29
Title
If-So Dynamic Content 1.9.9 - 1.10.1 - Editor+ Stored XSS via Conversion Name
Fixed in
Fixed in 1.10.2
CVSS
3.1 (low)
Published
2026-08-07
Title
If-So Dynamic Content – Elementor & All Page Builders Personalization < 1.10.0.1 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.10.0.1
CVSS
6.5 (medium)
Published
2025-09-03
Title
If-So Dynamic Content Personalization < 1.9.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.9.4.1
CVSS
6.4 (medium)
Published
2025-06-12
Title
If-So Dynamic Content Personalization < 1.9.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.9.3.2
CVSS
6.4 (medium)
Published
2024-11-20
Title
If-So Dynamic Content Personalization < 1.9.2.2 - Authenticated (Contributor+) Post Disclosure
Fixed in
Fixed in 1.9.2.2
CVSS
4.3 (medium)
Published
2024-06-22
Title
if-so < 1.8.0.4 - Reflected XSS
Fixed in
Fixed in 1.8.0.4
CVSS
4.2 (medium)
Published
2024-06-22
Title
if-so < 1.8.0.4 - Admin+ Stored XSS
Fixed in
Fixed in 1.8.0.4
CVSS
3.5 (low)
Published
2024-05-10
Title
If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS
Fixed in
Fixed in 1.8.0.3
CVSS
6.8 (medium)
Published
2024-05-09
Title
If-So Dynamic Content Personalization < 1.7.1.1 - Missing Authorization
Fixed in
Fixed in 1.7.1.1
CVSS
5.3 (medium)
Published
2023-12-27
Title
If-So Dynamic Content Personalization < 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.7
CVSS
6.4 (medium)