Advisories · Technology
revmakx InfiniteWP Client.
Every CVE that names revmakx InfiniteWP Client among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key
- revmakx InfiniteWP Client
- SQL injection
- CVSS 7.6 High
WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability
- revmakx InfiniteWP Client
- SQL injection
- CVSS 5.3 Medium
InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading
- revmakx InfiniteWP Client
- Path traversal
- CVSS 5.9 Medium
InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure
- revmakx InfiniteWP Client
- Information disclosure
- CVSS 7.5 HighCritical · CVSS 7+ and EPSS
InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
- revmakx InfiniteWP Client
- Information disclosure