Skip to contentWp Inventory Manager vulnerabilities
- wp inventory managerWordPress WP Inventory Manager plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-1114037.1 High
- chuck1982 wp inventory manager, wp inventory manager +1 moreWP Inventory Manager <= 2.5.5 - Authenticated (Contributor+) SQL Injection via 'sort_order' Shortcode AttributeCVE-2026-760056.5 Medium
- chuck1982 wp inventory manager, wp inventory manager +1 moreWP Inventory Manager <= 2.5.1 - Authenticated (Contributor+) SQL Injection via 'where' Shortcode AttributeCVE-2026-176076.5 Medium
- wp inventory managerWordPress WP Inventory Manager plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-908877.1 High
- wp inventory managerWordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerabilityCVE-2026-577728.5 High
- wp inventory managerWordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-499774.3 Medium
- chuck1982 wp inventory manager, wp inventory manager +1 moreWP Inventory Manager <= 2.3.2 - Reflected Cross-Site ScriptingCVE-2024-134346.1 Medium
- wp inventory manager, wp inventory manager inventory manager, wpinventory wp inventory manager +2 moreWordPress WP Inventory Manager Plugin <= 2.1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-340025.4 Medium
- unknown wp inventory manager, wp inventory manager +1 moreWP Inventory Manager < 2.1.0.13 - Reflected Cross-Site ScriptingCVE-2023-2123Public exploit6.1 Medium
- unknown wp inventory manager, wp inventory manager +1 moreWP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRFCVE-2023-28428.1 High
- unknown wp inventory manager, wp inventory manager +1 moreWP Inventory Manager < 2.1.0.12 - Reflected XSSCVE-2023-18066.1 Medium