Infility Global (Unknown) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-10-22. Vendor: Unknown.

CVEs of Infility Global

• CVE-2026-109931 - CVSS 3.7 (low), 2026-10-22: The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action available to unauthenticated users,…
• CVE-2026-8163 - CVSS 8.8 (high), 2026-06-23: The Infility Global WordPress plugin before 2.15.19 does not properly sanitize and escape some parameters before using them in SQL statements, leading to a…
• CVE-2026-7842 - CVSS 6.8 (medium), 2026-06-23: The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameters in the…
• CVE-2024-12723 - CVSS 6.1 (medium), 2025-01-28: The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…