Infility

Infility Global

13 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2024-12723

Exploit
  • EPSS 0.27%
  • Veröffentlicht 28.01.2025 06:15:31
  • Zuletzt bearbeitet 24.05.2025 01:21:32

The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin.

6.1

CVE-2024-12290

  • EPSS 0.37%
  • Veröffentlicht 07.01.2025 05:15:17
  • Zuletzt bearbeitet 08.04.2026 18:19:45

The Infility Global plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘set_type’ parameter in all versions up to, and including, 2.9.8 due to insufficient input sanitization and output escaping. This makes it possible for u...

6.5

CVE-2024-11496

  • EPSS 0.33%
  • Veröffentlicht 07.01.2025 05:15:13
  • Zuletzt bearbeitet 08.04.2026 19:19:43

The Infility Global plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the infility_global_ajax function in all versions up to, and including, 2.9.8. This makes it possible for authenticated a...