Advisories · Technology

WP Inventory Manager.

Every CVE that names WP Inventory Manager among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-111403 CVE record

CVSS 7.1 High

WordPress WP Inventory Manager plugin <= 2.5.9 - Cross Site Scripting (XSS) vulnerability
- WP Inventory Manager
- Cross-site scripting (XSS)
Not analysed yet 9 Nov 2026
CVE-2026-90887 CVE record

CVSS 7.1 High

WordPress WP Inventory Manager plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability
- WP Inventory Manager
- Cross-site scripting (XSS)
Not analysed yet 17 Sept 2026
CVE-2026-57772 CVE record

CVSS 8.5 High

WordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerability
- WP Inventory Manager
- SQL injection
Not analysed yet 13 Jul 2026
CVE-2025-49977 CVE record

CVSS 4.3 Medium

WordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability
- WP Inventory Manager
- Cross-site request forgery (CSRF)
Not analysed yet 20 Jun 2025
CVE-2023-34002 CVE record

CVSS 5.4 Medium

WordPress WP Inventory Manager Plugin <= 2.1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)
- WP Inventory Manager
- Cross-site request forgery (CSRF)
Not analysed yet 9 Nov 2023
CVE-2023-2123 CVE record

WP Inventory Manager < 2.1.0.13 - Reflected Cross-Site Scripting
- WP Inventory Manager
Not analysed yet 16 Aug 2023
CVE-2023-2842 CVE record

WP Inventory Manager < 2.1.0.14 - Inventory Items Deletion via CSRF
- WP Inventory Manager
Not analysed yet 27 Jun 2023
CVE-2023-1806 CVE record

CVSS 6.1 Medium

WP Inventory Manager < 2.1.0.12 - Reflected XSS
- WP Inventory Manager
Not analysed yet 8 May 2023