Skip to content
OpenAdvisories
Critical · 9.3 CVE-2025-68865 EUVD-2026-0868GHSA-phqj-98mg-9x2q

WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability

Published Jan 5, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Infility Infility Global infility-global allows SQL Injection.This issue affects Infility Global: from n/a through <= 2.15.06.

Affected products

VendorProductAffectedFixed
Infility Infility Global ≤ 2.15.06 —

References