Skip to content
OpenAdvisories

Product · revmakx

InfiniteWP Client

5 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.6

    WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9.

  • High 7.5
    CVE-2023-2916 Public exploit EPSS 24%

    InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract s…