Skip to content
OpenAdvisories

Vendor

revmakx

19 known vulnerabilities.

Products

Backup and Staging by WP Time Capsule 7 InfiniteWP Client 5 WPCal.io – Easy Meeting Scheduler 2 WP Duplicate 2 WP Duplicate – WordPress Migration Plugin 1 WPCal.io 1 DefendWP Firewall 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-17576

    InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key

    The InfiniteWP Client plugin for WordPress is vulnerable to SQL Injection via the get_comments action in versions up to, and including, 1.13.9. This is due to insufficient escaping on the array-key names supplied in the JSON request body before use in a SQL s…

    revmakx InfiniteWP Client Web / CMS
  • Medium 6.5
    CVE-2026-8996

    Backup and Staging by WP Time Capsule <= 1.22.26 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via download_recent_decrypted_file_wptc Function

    The Backup and Staging by WP Time Capsule plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.22.26 via the download_recent_decrypted_file_wptc. This makes it possible for authenticated attackers, with …

    revmakx Backup and Staging by WP Time Capsule Web / CMS
  • Medium 6.5
    CVE-2025-66103

    WordPress WPCal.io plugin <= 0.9.5.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in revmakx WPCal.io wpcal allows DOM-Based XSS.This issue affects WPCal.io: from n/a through <= 0.9.5.9.

    revmakx WPCal.io
  • Medium 5.4
    CVE-2025-24652

    WordPress WP Duplicate plugin <= 1.1.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in revmakx WP Duplicate local-sync allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Duplicate: from n/a through <= 1.1.6.

    revmakx WP Duplicate
  • Medium 5.3
    CVE-2024-10585

    InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading

    The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.13.0 via the 'historyID' parameter of the ~/debug-chart/index.php file. This makes it possible for unauthenticated attackers to read .txt files …

    revmakx InfiniteWP Client Web / CMS
  • Medium 5.4
    CVE-2024-34816

    WordPress WPCal.io plugin <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8.

    revmakx WPCal.io – Easy Meeting Scheduler
  • Medium 4.3
    CVE-2024-32795

    WordPress WPCal.io <= 0.9.5.8 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Revmakx WPCal.Io – Easy Meeting Scheduler.This issue affects WPCal.Io – Easy Meeting Scheduler: from n/a through 0.9.5.8.

    revmakx WPCal.io – Easy Meeting Scheduler
  • Medium 5.9
    CVE-2023-6565

    InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure

    The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.12.3 via the multi-call backup option. This makes it possible for unauthenticated attackers to extract sensitive data from a tem…

    revmakx InfiniteWP Client Web / CMS