If-so Dynamic Content (Unknown) - vulnerabilities (CVEs)

3 CVEs, 3 in the last 30 days, 1 known versions, newest CVE from 2026-10-07. Vendor: Unknown.

CVEs of If-so Dynamic Content

• CVE-2026-87971 - CVSS 7.1 (high), 2026-10-07: The If-So Dynamic Content WordPress plugin before 1.10.2 does not validate the URL scheme of a request-supplied value before reflecting it into a link on an…
• CVE-2026-87970 - CVSS 4.7 (medium), 2026-10-01: The If-So Dynamic Content WordPress plugin before 1.10.2 does not escape a request-supplied value before reflecting it in an unauthenticated AJAX response…
• CVE-2026-87973 - CVSS 3.1 (low), 2026-10-01: The If-So Dynamic Content WordPress plugin before 1.10.2 does not sanitize a conversion name before storing it, nor escape it when rendering the analytics…