WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
infogram
Published
2024-01-03
Title
Infogram <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infographic-and-list-builder-ilist
Published
2022-02-28
Title
Infographic Maker - iList < 4.3.8 - Unauthenticated SQL Injection
Slug
infographic-and-list-builder-ilist
Published
2024-04-19
Title
AI Infographic Maker < 4.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infographic-and-list-builder-ilist
Published
2024-06-14
Title
Infographic Maker iList < 4.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Title Update
Slug
infographic-and-list-builder-ilist
Published
2025-01-30
Title
AI Infographic Maker < 5.0.0 - Unauthenticated Arbitrary Shortcode Execution
Slug
infolinks-ad-wrap
Published
2024-08-27
Title
infolinks Ad Wrap <= 1.0.2 - Settings Update via CSRF
Slug
infomaniak-connect-openid
Published
2026-03-06
Title
Infomaniak Connect for OpenID <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
information-for-help
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
information-reel
Published
2023-10-30
Title
Information Reel < 10.1 - Authenticated (Subscriber+) SQL Injection via Shortcode
Slug
infugrator
Published
2025-03-20
Title
Infugrator <= 1.0.3 - Reflected Cross-Site Scripting
Slug
infunding
Published
2025-01-17
Title
InFunding – Plugin for Charity & Crowdfunding Website <= 1.0 - Reflected Cross-Site Scripting
Slug
infusion4wp
Published
2014-04-25
Title
iMember360is 3.9.001 - XSS / Disclosure / Code Execution
Slug
infusionsoft
Published
2014-10-06
Title
Infusionsoft Gravity Forms 1.5.3 - 1.5.10 Arbitrary File Upload
Slug
infusionsoft
Published
2016-04-12
Title
Infusionsoft Gravity Forms Add-on <= 1.5.11 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
infusionsoft
Published
2014-04-25
Title
Infusionsoft Gravity Forms Add-on < 1.5.7 - Unauthenticated Reflected XSS
Slug
infusionsoft-landing-pages
Published
2023-09-29
Title
Keap Landing Pages <= 1.4.2 - Settings Update via CSRF
Slug
infusionsoft-official-opt-in-forms
Published
2023-12-21
Title
Keap Official Opt-in Forms < 1.0.12 - Admin+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2024-01-03
Title
Keap Official Opt-in Forms <= 2.0.3 - Contributor+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2024-09-30
Title
Keap Official Opt-in Forms <= 2.0.3 - Contributor+ Stored XSS
Slug
infusionsoft-official-opt-in-forms
Published
2025-02-17
Title
Keap Official Opt-in Forms < 2.0.2 - Unauthenticated Limited Local File Inclusion
Slug
infusionsoft-web-form-javascript
Published
2025-03-31
Title
Infusionsoft Web Form JavaScript <= 1.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
infusionsoft-web-tracker
Published
2025-02-03
Title
Infusionsoft Analytics <= 2.0 - Cross-Site Request Forgery
Slug
injection-guard
Published
2025-07-24
Title
Injection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']
Slug
injection-guard
Published
2026-03-20
Title
Injection Guard < 1.3.0 - Unauthenticated Stored Cross-Site Scripting via Query Parameter Name
Slug
ink-official
Published
2024-10-21
Title
INK Official <= 4.1.2 - Authenticated (Contributor+) Arbitrary File Upload