Infinitewp Client vulnerabilities

• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key CVE-2026-17576 6.5 MediumSeptember 18, 2026
• infinitewp client, revmakx infinitewp client +1 more WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability CVE-2026-74011 7.6 HighAugust 20, 2026
• infinitewp client, unknown infinitewp client +1 more InfiniteWP Client < 1.13.6 - Unauthenticated Administrator Account Takeover on Multisite CVE-2026-15038 Public exploit 9.8 CriticalAugust 9, 2026
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading CVE-2024-10585 5.3 MediumJanuary 8, 2025
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure CVE-2023-6565 5.9 MediumFebruary 20, 2024
• infinitewp client, revmakx infinitewp client +1 more InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure CVE-2023-2916 Public exploit EPSS 24.0% 7.5 HighAugust 15, 2023