Infility Infility_global
3 CVEs affecting Infility Infility_global. Latest disclosed: 2025-01-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-11496 | Medium | 6.5 | 2025-01-07 | The Infility Global plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the infility_global_ajax funct… |
CVE-2024-12723 | Medium | 6.1 | 2025-01-28 | The Infility Global WordPress plugin through 2.9.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross… |
CVE-2024-12290 | Medium | 6.1 | 2025-01-07 | The Infility Global plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘set_type’ parameter in all versions up to, and including, 2.9… |