Vulnerability in Infinitewp Client

CVE-2026-15038

The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing unauthenticated attac…

Affected products

  • Unknown Infinitewp Client — versions 0

References