WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
infinite-slider
Published
2024-11-18
Title
Infinite Slider <= 2.0.1 - Reflected Cross-Site Scripting
Slug
info-boxes-shortcode-and-widget
Published
2025-03-24
Title
Info Boxes Shortcode and Widget <= 1.15 - Cross-Site Request Forgery
Slug
info-cards
Published
2025-02-23
Title
Info Cards – Gutenberg block for creating Beautiful Cards < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
info-cards
Published
2025-08-26
Title
Info Cards < 2.0.0 - Missing Authorization
Slug
infocob-crm-forms
Published
2025-05-22
Title
Infocob CRM Forms < 2.4.1 - Authenticated (Editor+) Arbitrary File Download
Slug
infogram
Published
2024-01-03
Title
Infogram <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infographic-and-list-builder-ilist
Published
2022-02-28
Title
Infographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection
Slug
infographic-and-list-builder-ilist
Published
2024-04-19
Title
AI Infographic Maker < 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infographic-and-list-builder-ilist
Published
2024-06-14
Title
Infographic Maker iList < 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title Update
Slug
infographic-and-list-builder-ilist
Published
2025-01-30
Title
AI Infographic Maker < 5.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
infolinks-ad-wrap
Published
2024-08-27
Title
infolinks Ad Wrap <= 1.0.2 - Settings Update via CSRF
Slug
information-for-help
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
information-reel
Published
2023-10-30
Title
Information Reel < 10.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
infugrator
Published
2025-03-20
Title
Infugrator <= 1.0.3 - Reflected Cross-Site Scripting
Slug
infunding
Published
2025-01-17
Title
InFunding – Plugin for Charity & Crowdfunding Website <= 1.0 - Reflected Cross-Site Scripting
Slug
infusion4wp
Published
2014-04-25
Title
iMember360is 3.9.001 - XSS / Disclosure / Code Execution
Slug
infusionsoft
Published
2014-10-06
Title
Infusionsoft Gravity Forms 1.5.3 - 1.5.10 Arbitrary File Upload
Slug
infusionsoft
Published
2016-04-12
Title
Infusionsoft Gravity Forms Add-on <= 1.5.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
infusionsoft
Published
2014-04-25
Title
Infusionsoft Gravity Forms Add-on < 1.5.7 - Unauthenticated Reflected XSS
Slug
infusionsoft-landing-pages
Published
2023-09-29
Title
Keap Landing Pages <= 1.4.2 - Settings Update via CSRF
Slug
infusionsoft-official-opt-in-forms
Published
2023-12-21
Title
Keap Official Opt-in Forms < 1.0.12 - Admin+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2024-01-03
Title
Keap Official Opt-in Forms <= 2.0.3 - Contributor+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2024-09-30
Title
Keap Official Opt-in Forms <= 2.0.3 - Contributor+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2025-02-17
Title
Keap Official Opt-in Forms < 2.0.2 - Unauthenticated Limited Local File Inclusion
Slug
infusionsoft-web-form-javascript
Published
2025-03-31
Title
Infusionsoft Web Form JavaScript <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting