If-so Dynamic Content Personalization (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-05-15. Vendor: Unknown.

CVEs of If-so Dynamic Content Personalization

• CVE-2024-5440 - CVSS 5.4 (medium), 2025-05-15: The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.3 does not validate and escape some of its shortcode attributes before outputting them…
• CVE-2024-6070 - CVSS 4.8 (medium), 2024-07-13: The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2024-5713 - CVSS 5.4 (medium), 2024-07-13: The If-So Dynamic Content Personalization WordPress plugin before 1.8.0.4 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in…