Inisev vulnerabilities

Products

• Backupbliss – Backup & Migration With Free Cloud Storage 8
• Social Media Share Buttons & Social Sharing Icons 5
• Redirection 4
• Social Media & Share Icons 4
• Backup Migration 3
• Duplicate Post 3
• Enhanced Text Widget 3
• Social Media Share Buttons \& Social Sharing Icons 3
• Social Share Icons & Social Share Buttons 3
• Ultimate Posts Widget 3
• Pop-up 2
• Rss Redirect \& Feedburner Alternative 2
• Ssl Mixed Content Fix 2

Newest

• inisev social share icons & social share buttons, social share pro share icons & social share buttons +1 more WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-42697 7.1 HighOctober 10, 2026
• copydeleteposts duplicate post Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameter CVE-2026-89424 6.4 MediumOctober 1, 2026
• inisev social media share buttons & social sharing icons Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL CVE-2026-89047 6.1 MediumOctober 1, 2026
• inisev social media & share icons WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability CVE-2026-66623 7.1 HighAugust 24, 2026
• inisev backup migration Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter CVE-2026-7693 7.2 HighAugust 5, 2026
• inisev social media & share icons WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.6 - Broken Access Control vulnerability CVE-2024-31435 4.3 MediumJune 17, 2026
• inisev backup migration WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability CVE-2026-39480 7.5 HighJune 15, 2026
• inisev copy & delete posts Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling Handler CVE-2026-53738 7.2 HighJune 10, 2026
• inisev backupbliss – backup & migration with free cloud storage Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage CVE-2025-14944 5.3 MediumApril 7, 2026
• unknown social media share buttons & social sharing icons, inisev social media share buttons \& social sharing icons +1 more Social Media Share Buttons < 2.9.0 - Admin+ Stored XSS CVE-2024-10362 4.8 MediumMay 15, 2025
• inisev backupbliss – backup & migration with free cloud storage Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace' CVE-2024-10932 8.8 HighJanuary 4, 2025
• inisev social media & share icons WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRF CVE-2023-34009 4.3 MediumDecember 13, 2024
• inisev social media & share icons, social media share buttons \& social sharing icons +1 more WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2024-37552 5.9 MediumJuly 21, 2024
• inisev backup migration WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability CVE-2024-32686 5.3 MediumApril 18, 2024
• unknown social media share buttons & social sharing icons, inisev social media share buttons \& social sharing icons +1 more Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings CVE-2024-2118 5.9 MediumApril 17, 2024
• inisev ultimate posts widget Ultimate Posts Widget < 2.3.1 - Admin+ Stored XSS CVE-2024-0561 5.4 MediumMarch 11, 2024
• inisev enhanced text widget Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS CVE-2024-0559 6.5 MediumMarch 11, 2024
• backupbliss backup migration, inisev backupbliss – backup & migration with free cloud storage +1 more Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure CVE-2023-6266 7.5 HighJanuary 11, 2024
• backupbliss backup migration, inisev backupbliss – backup & migration with free cloud storage +1 more Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url CVE-2023-7002 EPSS 30.8% 7.2 HighDecember 23, 2023
• backupbliss backup migration, inisev backupbliss – backup & migration with free cloud storage +1 more Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion CVE-2023-6972 Public exploit 9.8 CriticalDecember 23, 2023
• backupbliss backup migration, inisev backupbliss – backup & migration with free cloud storage +1 more Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution CVE-2023-6553 Public exploit EPSS 97.8% 9.8 CriticalDecember 15, 2023
• inisev social media share buttons & social sharing icons, ultimatelysocial social media share buttons \& social sharing icons +1 more Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure CVE-2023-5070 Public exploit 6.5 MediumOctober 20, 2023
• inisev social media share buttons & social sharing icons, ultimatelysocial social media share buttons \& social sharing icons +1 more Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery CVE-2023-5602 4.3 MediumOctober 20, 2023
• backupbliss backup migration, clone, cl272 enhanced text widget +12 more +14 more Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function CVE-2023-3977 4.3 MediumJuly 28, 2023
• backupbliss backup migration, clone, cl272 enhanced text widget +13 more +15 more Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function CVE-2023-0958 4.3 MediumJuly 28, 2023
• inisev redirection Redirection < 1.1.5 - Plugin Reset via CSRF CVE-2023-1331 6.5 MediumApril 17, 2023
• inisev redirection Redirection < 1.1.4 - Redirect Creation via CSRF CVE-2023-1330 6.5 MediumApril 3, 2023