WordPress Plugin Vulnerabilities

InfiniteWP Client <= 1.3.7 - Privilege Escalation

Description

The InfiniteWP Client WordPress plugin was affected by a Privilege Escalation security vulnerability.

Affects Plugins

Plugin icon
iwp-client
Fixed in 1.3.8

References

URL
https://blog.sucuri.net/2014/12/security-advisory-high-severity-infinitewp-client-wordpress-plugin.html

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
7e65fbfe-d4f4-42e6-9c1f-f587afeca6a1

Timeline

Publicly Published
2014-12-02 (about 11 years ago)
Added
2014-12-02 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2020-01-08
Title
Minimal Coming Soon & Maintenance Mode < 2.15 - Insecure Permissions: Enable and Disable Maintenance Mode
Published
2020-02-10
Title
Profile Builder and Profile Builder Pro < 3.1.1 - User Registration With Administrator Role
Published
2020-08-21
Title
Contact Form - Form builder by Kali Forms < 2.1.2 - Multiple CSRF Bypass Issues
Published
2020-08-21
Title
WooCommerce - NAB Transact < 2.1.2 - Payment Bypass
Published
2019-10-14
Title
WordPress <= 5.2.3 - Unauthenticated View Private/Draft Posts