Security
فارسی
All products

iwp-client

WordPress · Plugin
10 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array KeyCVE-2026-17576 iwp-client WordPress Medium Fix reported
InfiniteWP Client <= 1.13.5 - Unauthenticated Administrator Account Takeover on Multi-SiteCVE-2026-15038 iwp-client WordPress High Fix reported
InfiniteWP Client <= 1.13.9 - Authenticated (Administrator+) SQL InjectionCVE-2026-74011 iwp-client WordPress Medium Fix reported
InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File ReadingCVE-2024-10585 iwp-client WordPress Medium Fix reported
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information ExposureCVE-2023-6565 iwp-client WordPress Medium Fix reported
InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information ExposureCVE-2023-2916 iwp-client WordPress High Fix reported
InfiniteWP Client <= 1.3.7 - PHP Object Injection iwp-client WordPress Critical Fix reported
InfiniteWP Client <= 1.3.7 - Privilege Escalation iwp-client WordPress Critical Fix reported
InfiniteWP Client <= 1.6.0 - Unauthenticated PHP Object InjectionCVE-2016-15004 iwp-client WordPress Critical Fix reported
InfiniteWP Client <= 1.9.4.4 - Authentication BypassCVE-2020-8772 iwp-client WordPress Critical Fix reported