Revmakx Infinitewp Client — known CVE vulnerabilities

Every CVE whose affected-product data names Revmakx Infinitewp Client, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-8772 — CVSS 9.8 (critical): The InfiniteWP Client plugin before 1.9.4.5 for WordPress has a missing authorization check in iwp_mmb_set_request in init.php. Any…
• CVE-2023-2916 — CVSS 7.5 (high): The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the…
• CVE-2016-15004 — CVSS 7.3 (high): A vulnerability was found in InfiniteWP Client Plugin 1.5.1.3/1.6.0. It has been declared as critical. Affected by this vulnerability is an…
• CVE-2023-6565 — CVSS 5.9 (medium): The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.12.3 via…
• CVE-2024-10585 — CVSS 5.3 (medium): The InfiniteWP Client plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.13.0 via the 'historyID'…