Infinitewp vulnerabilities

Products

• Client 6
• Infinitewp 4

Newest

• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key CVE-2026-17576 6.5 MediumSeptember 18, 2026
• infinitewp client, revmakx infinitewp client +1 more WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability CVE-2026-74011 7.6 HighAugust 20, 2026
• infinitewp client, unknown infinitewp client +1 more InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite CVE-2026-15038 Public exploit 9.8 CriticalAugust 9, 2026
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading CVE-2024-10585 5.3 MediumJanuary 8, 2025
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure CVE-2023-6565 5.9 MediumFebruary 20, 2024
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure CVE-2023-2916 Public exploit EPSS 24.0% 7.5 HighAugust 15, 2023
• infinitewp In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset... CVE-2020-28642 9.8 CriticalNovember 16, 2020
• infinitewp Unrestricted file upload vulnerability in uploadScript.php in InfiniteWP Admin Panel before 2.4.4... CVE-2014-9521 7.5 HighJanuary 5, 2015
• infinitewp SQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote... CVE-2014-9520 7.5 HighJanuary 5, 2015
• infinitewp SQL injection vulnerability in login.php in InfiniteWP Admin Panel before 2.4.3 allows remote... CVE-2014-9519 7.5 HighJanuary 5, 2015