Inisev
16 CVEs across 14 Inisev products. Browse Inisev vulnerabilities, severities, and proof-of-concept exploits.
Inisev products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-7693 | High | 7.2 | 2026-08-05 | The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization… |
CVE-2024-31435 | Medium | 4.3 | 2026-06-17 | : Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Access Control Security Levels. This issue… |
CVE-2026-39480 | High | 7.5 | 2026-06-15 | Unauthenticated Sensitive Data Exposure in Backup Migration <= 2.1.1 versions. |
CVE-2026-53738 | High | 8.1 | 2026-06-10 | Copy & Delete Posts through 1.5.4 lets any plugin-enabled non-admin role invoke every operation in the cdp_action_handling AJAX handler. Attackers with an enab… |
CVE-2025-14944 | Medium | 5.3 | 2026-04-07 | The Backup Migration plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 2.0.0. This is due to a missing capabili… |
CVE-2024-10362 | Medium | 4.8 | 2025-05-15 | The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.9.1 does not sanitize and escape some of its settings, which could allow high-p… |
CVE-2024-10932 | High | 8.8 | 2025-01-04 | The Backup Migration plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.6 via deserialization of untrusted in… |
CVE-2023-34009 | Medium | 4.3 | 2024-12-13 | Missing Authorization vulnerability in Inisev Social Media & Share Icons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue aff… |
CVE-2024-37552 | Medium | 5.9 | 2024-07-21 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Inisev Social Media & Share Icons allows Stored XS… |
CVE-2024-32686 | Medium | 5.3 | 2024-04-18 | Insertion of Sensitive Information into Log File vulnerability in Inisev Backup Migration.This issue affects Backup Migration: from n/a through 1.4.3. |
CVE-2024-2118 | Medium | 5.9 | 2024-04-17 | The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.8.9 does not sanitise and escape some of its settings, which could allow high p… |
CVE-2024-0561 | Medium | 5.4 | 2024-03-11 | The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, whic… |
CVE-2024-0559 | Medium | 6.5 | 2024-03-11 | The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which… |
CVE-2023-6266 | High | 7.5 | 2024-01-11 | The Backup Migration plugin for WordPress is vulnerable to unauthorized access of data due to insufficient path and file validation on the BMI_BACKUP case of t… |
CVE-2023-7002 | High | 7.2 | 2023-12-23 | The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 1.3.9 via the 'url' parameter. This vuln… |
CVE-2023-6972 | Critical | 9.8 | 2023-12-23 | The Backup Migration plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.9 via the 'content-backups' and 'content-na… |
CVE-2023-6553 | Critical | 9.8 | 2023-12-15 | The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php… |
CVE-2023-5602 | Medium | 4.3 | 2023-10-20 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2… |
CVE-2023-5070 | Medium | 6.5 | 2023-10-20 | The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2… |
CVE-2023-3977 | Medium | 4.3 | 2023-07-28 | Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on th… |
CVE-2023-0958 | Medium | 4.3 | 2023-07-28 | Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation fun… |
CVE-2023-1331 | Medium | 6.5 | 2023-04-17 | The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete al… |
CVE-2023-1330 | Medium | 6.5 | 2023-04-03 | The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects v… |