Advisories · Technology

Infility Global.

Every CVE that names Infility Global among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-109931 CVE record

CVSS 3.7 Low

Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update
- Infility Global
- Broken access control
Not analysed yet 22 Oct 2026
CVE-2026-10734 CVE record

CVSS 7.2 High

Infility Global <= 2.15.21 - Unauthenticated Stored Cross-Site Scripting via /cf7_record Log Endpoint
- Infility Global
- Cross-site scripting (XSS)
Not analysed yet 16 Aug 2026
CVE-2026-8163 CVE record

CVSS 8.8 High

Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter
- Infility Global
Not analysed yet 23 Jun 2026
CVE-2026-7842 CVE record

CVSS 6.8 Medium

Infility Global < 2.15.20 - Editor+ SQL Injection via orderby Parameter
- Infility Global
Not analysed yet 23 Jun 2026
CVE-2026-8685 CVE record

CVSS 6.5 Medium

Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
- Infility Global
- SQL injection
Not analysed yet 20 May 2026
CVE-2025-15268 CVE record

CVSS 7.5 High

Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass
- Infility Global
- SQL injection
Not analysed yet 4 Feb 2026
CVE-2025-68864 CVE record

CVSS 7.1 High

WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability
- Infility Global
- Cross-site scripting (XSS)
Not analysed yet 22 Jan 2026
CVE-2025-68865 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability
- Infility Global
- SQL injection
Not analysed yet 5 Jan 2026
CVE-2025-12968 CVE record

CVSS 8.8 High

Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload
- Infility Global
- Unrestricted file upload
Not analysed yet 12 Dec 2025
CVE-2025-47650 CVE record

CVSS 6.5 Medium

WordPress Infility Global <= 2.15.06 - Arbitrary File Download vulnerability
- Infility Global
- Path traversal
Not analysed yet 20 Aug 2025
CVE-2025-47652 CVE record

CVSS 7.1 High

WordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerability
- Infility Global
- Cross-site scripting (XSS)
Not analysed yet 16 Jul 2025
CVE-2025-52774 CVE record

CVSS 7.1 High

WordPress Infility Global plugin <= 2.15.06 - Cross Site Scripting (XSS) vulnerability
- Infility Global
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2025
CVE-2025-47651 CVE record

CVSS 8.5 High

WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability
- Infility Global
- SQL injection
Not analysed yet 9 Jun 2025
CVE-2024-12723 CVE record

CVSS 6.1 Medium

Infility Global <= 2.9.8 - Reflected XSS
- Infility Global
Not analysed yet 28 Jan 2025
CVE-2024-11496 CVE record

CVSS 6.5 Medium

Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update
- Infility Global
- Broken access control
Not analysed yet 7 Jan 2025
CVE-2024-12290 CVE record

CVSS 6.1 Medium

Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter
- Infility Global
- Cross-site scripting (XSS)
Not analysed yet 7 Jan 2025