Xfinitysoft - vulnerabilities (CVEs)

4 CVEs in 4 products, 0 in the last 30 days, newest from 2026-01-07.

Products

• Content Cloner - 1 CVEs
• Order Limit For Woocommerce - 1 CVEs
• Reviewify Review Discounts Photovideo Reviews For Woocommerce - 1 CVEs
• Wp Post Hide - 1 CVEs

Newest CVEs of Xfinitysoft

• CVE-2025-14070 - CVSS 7.5 (high), 2026-01-07: The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'send_test_email' AJAX action…
• CVE-2025-54042 - CVSS 4.3 (medium), 2025-07-16: Cross-Site Request Forgery (CSRF) vulnerability in Xfinitysoft WP Post Hide wp-post-hide allows Cross Site Request Forgery.This issue affects WP Post Hide:…
• CVE-2025-26928 - CVSS 4.3 (medium), 2025-02-25: Missing Authorization vulnerability in Xfinitysoft Order Limit for WooCommerce wc-order-limit-lite allows Exploiting Incorrectly Configured Access Control…
• CVE-2025-22681 - CVSS 4.3 (medium), 2025-02-03: Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security…