Infility vulnerabilities

Products

• Global 16
• Global 3

Newest

• infility global, unknown infility global +1 more Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update CVE-2026-109931 3.7 LowOctober 22, 2026
• infility global Infility Global <= 2.15.21 - Unauthenticated Stored Cross-Site Scripting via /cf7_record Log Endpoint CVE-2026-10734 7.2 HighAugust 16, 2026
• infility global, unknown infility global +1 more Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter CVE-2026-8163 8.8 HighJune 23, 2026
• infility global, unknown infility global +1 more Infility Global < 2.15.20 - Editor+ SQL Injection via orderby Parameter CVE-2026-7842 6.8 MediumJune 23, 2026
• infility global Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter CVE-2026-8685 6.5 MediumMay 20, 2026
• infility global Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass CVE-2025-15268 7.5 HighFebruary 4, 2026
• infility global WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability CVE-2025-68864 7.1 HighJanuary 22, 2026
• infility global WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability CVE-2025-68865 9.3 CriticalJanuary 5, 2026
• infility global Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2025-12968 8.8 HighDecember 12, 2025
• infility global WordPress Infility Global <= 2.15.06 - Arbitrary File Download vulnerability CVE-2025-47650 6.5 MediumAugust 20, 2025
• infility global WordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-47652 7.1 HighJuly 16, 2025
• infility global WordPress Infility Global plugin <= 2.15.06 - Cross Site Scripting (XSS) vulnerability CVE-2025-52774 7.1 HighJune 27, 2025
• infility global WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability CVE-2025-47651 8.5 HighJune 9, 2025
• infility global, unknown infility global +1 more Infility Global <= 2.9.8 - Reflected XSS CVE-2024-12723 6.1 MediumJanuary 28, 2025
• infility global Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update CVE-2024-11496 6.5 MediumJanuary 7, 2025
• infility global Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter CVE-2024-12290 6.1 MediumJanuary 7, 2025