WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
infinite-scroll
Published
2024-10-17
Title
Infinite-Scroll <= 2.6.2 - Cross-Site Request Forgery to Plugin Settings Update
Slug
infinite-slider
Published
2024-11-18
Title
Infinite Slider <= 2.0.1 - Reflected Cross-Site Scripting
Slug
info-boxes-shortcode-and-widget
Published
2025-03-24
Title
Info Boxes Shortcode and Widget <= 1.15 - Cross-Site Request Forgery
Slug
info-cards
Published
2025-02-23
Title
Info Cards – Gutenberg block for creating Beautiful Cards < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
info-cards
Published
2025-08-26
Title
Info Cards < 2.0.0 - Missing Authorization
Slug
info-cards
Published
2026-03-18
Title
Info Cards < 2.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Slug
infocob-crm-forms
Published
2025-05-22
Title
Infocob CRM Forms < 2.4.1 - Authenticated (Editor+) Arbitrary File Download
Slug
infogram
Published
2024-01-03
Title
Infogram <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infographic-and-list-builder-ilist
Published
2022-02-28
Title
Infographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection
Slug
infographic-and-list-builder-ilist
Published
2024-04-19
Title
AI Infographic Maker < 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infographic-and-list-builder-ilist
Published
2024-06-14
Title
Infographic Maker iList < 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title Update
Slug
infographic-and-list-builder-ilist
Published
2025-01-30
Title
AI Infographic Maker < 5.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
infolinks-ad-wrap
Published
2024-08-27
Title
infolinks Ad Wrap <= 1.0.2 - Settings Update via CSRF
Slug
infomaniak-connect-openid
Published
2026-03-06
Title
Infomaniak Connect for OpenID <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
information-for-help
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
information-reel
Published
2023-10-30
Title
Information Reel < 10.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
infugrator
Published
2025-03-20
Title
Infugrator <= 1.0.3 - Reflected Cross-Site Scripting
Slug
infunding
Published
2025-01-17
Title
InFunding – Plugin for Charity & Crowdfunding Website <= 1.0 - Reflected Cross-Site Scripting
Slug
infusedwooPRO
Published
2026-05-13
Title
InfusedWoo Pro < 5.1.3 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via Arbitrary User Meta Update
Slug
infusedwooPRO
Published
2026-05-13
Title
InfusedWoo Pro < 5.1.3 - Unauthenticated Arbitrary File Read via 'url' Parameter
Slug
infusedwooPRO
Published
2026-05-13
Title
InfusedWoo Pro < 5.1.3 - Unauthenticated Missing Authorization to Arbitrary Post Deletion via Multiple Parameters
Slug
infusedwooPRO
Published
2026-05-13
Title
InfusedWoo Pro < 5.1.3 - Unauthenticated Missing Authorization to Privilege Escalation via 'iwar_save_recipe'
Slug
infusion4wp
Published
2014-04-25
Title
iMember360is 3.9.001 - XSS / Disclosure / Code Execution
Slug
infusionsoft
Published
2014-10-06
Title
Infusionsoft Gravity Forms 1.5.3 - 1.5.10 Arbitrary File Upload
Slug
infusionsoft
Published
2016-04-12
Title
Infusionsoft Gravity Forms Add-on <= 1.5.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)