Advisories · Technology

If-So Dynamic Content Personalization.

Every CVE that names If-So Dynamic Content Personalization among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121782 CVE record

CVSS 7.1 High

WordPress If-So Dynamic Content Personalization plugin <= 1.10.3 - Cross Site Scripting (XSS) vulnerability
- If-So Dynamic Content Personalization
- Cross-site scripting (XSS)
Not analysed yet 9 Nov 2026
CVE-2026-100507 CVE record

CVSS 7.1 High

WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability
- If-So Dynamic Content Personalization
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2026-66446 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability
- If-So Dynamic Content Personalization
- SQL injection
Not analysed yet 13 Aug 2026
CVE-2025-58602 CVE record

CVSS 6.5 Medium

WordPress If-So Dynamic Content Personalization Plugin <= 1.9.4 - Cross Site Scripting (XSS) Vulnerability
- If-So Dynamic Content Personalization
- Cross-site scripting (XSS)
Not analysed yet 3 Sept 2025
CVE-2025-49875 CVE record

CVSS 6.5 Medium

WordPress If-So Dynamic Content Personalization plugin <= 1.9.3.1 - Cross Site Scripting (XSS) Vulnerability
- If-So Dynamic Content Personalization
- Cross-site scripting (XSS)
Not analysed yet 17 Jun 2025
CVE-2024-5440 CVE record

CVSS 5.4 Medium

If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS
- If-So Dynamic Content Personalization
Not analysed yet 15 May 2025
CVE-2024-6070 CVE record

CVSS 4.8 Medium

if-so < 1.8.0.4 - Admin+ Stored XSS
- If-So Dynamic Content Personalization
Not analysed yet 13 Jul 2024
CVE-2024-5713 CVE record

CVSS 5.4 Medium

if-so < 1.8.0.4 - Reflected XSS
- If-So Dynamic Content Personalization
Not analysed yet 13 Jul 2024