Skip to content
OpenAdvisories

Vendor

Inisev

21 known vulnerabilities.

Products

BackupBliss – Backup & Migration with Free Cloud Storage 8 Social Media Share Buttons & Social Sharing Icons 5 Social Media & Share Icons 4 Backup Migration 3 Duplicate Post 3 Social Share Icons & Social Share Buttons 3 Redirection 2 Pop-up 2 Copy & Delete Posts 1
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-89424

    Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameter

    The Duplicate Post plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noti_token' parameter in all versions up to, and including, 1.5.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticate…

    Inisev Duplicate Post Web / CMS
  • Medium 6.1
    CVE-2026-89047

    Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL

    The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via URL in all versions up to, and including, 3.0.1 due to insufficient input sanitization and output escaping. This makes it possible f…

    Inisev Social Media Share Buttons & Social Sharing Icons Web / CMS
  • Medium 4.3
    CVE-2024-31435

    WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.6 - Broken Access Control vulnerability

    : Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Social Media & Share Icons: from n/a through 2.8.6.

    Inisev Social Media & Share Icons
  • Medium 5.3
    CVE-2025-14944

    Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage

    The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to a missing capability check on the 'initializeOfflineAjax' function and lack of proper nonce verification. The endpoint…

    Inisev BackupBliss – Backup & Migration with Free Cloud Storage Web / CMS
  • Medium 4.3
    CVE-2023-34009

    WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRF

    Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Social Media & Share Icons: from n/a through 2.8.1.

    Inisev Social Media & Share Icons
  • Medium 5.9
    CVE-2024-37552

    WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Inisev Social Media & Share Icons allows Stored XSS.This issue affects Social Media & Share Icons: from n/a through 2.9.1.

    Inisev Social Media & Share Icons
  • Medium 5.3
    CVE-2024-32686

    WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability

    Insertion of Sensitive Information into Log File vulnerability in Inisev Backup Migration.This issue affects Backup Migration: from n/a through 1.4.3.

    Inisev Backup Migration
  • Medium 6.5
    CVE-2023-5070 Public exploit

    Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure

    The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save_export function. This can allow subscribers to export plugin settings that inc…

    Inisev Social Media Share Buttons & Social Sharing Icons Web / CMS
  • Medium 4.3
    CVE-2023-5602

    Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery

    The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. This is due to missing or incorrect nonce validation on several functions corresponding to AJAX…

    Inisev Social Media Share Buttons & Social Sharing Icons Web / CMS
  • Medium 4.3
    CVE-2023-0958

    Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

    Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called via the inisev_installation AJAX aciton in various versions. This makes it poss…

    Inisev Migrate cl272 steve85b
  • Medium 4.3
    CVE-2023-3977

    Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

    Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation function that is called via the inisev_installation AJAX aciton in various ver…

    Inisev Migrate cl272 steve85b