IInfility

Products

Exploited and recent CVEs

• CVE-2026-10734 High 7.2 Infility Global <= 2.15.21 - Unauthenticated Stored Cross-Site Scripting via /cf7_record Log Endpoint 0.4%
• CVE-2026-8685 Medium 6.5 Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter 0.4%
• CVE-2025-15268 High 7.5 Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass 0.5%
• CVE-2025-68864 High 7.1 WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-68865 Critical 9.3 WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability 0.3%
• CVE-2025-12968 High 8.8 Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload 0.6%
• CVE-2025-47650 Medium 6.5 WordPress Infility Global <= 2.15.06 - Arbitrary File Download vulnerability 0.4%
• CVE-2025-47652 High 7.1 WordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
• CVE-2025-52774 High 7.1 WordPress Infility Global plugin <= 2.15.06 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-47651 High 8.5 WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability 0.3%
• CVE-2024-11496 Medium 6.5 Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update 0.3%
• CVE-2024-12290 Medium 6.1 Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter 0.4%