ifso
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| If-So Dynamic Content – Elementor & All Page Builders Personalization | 3 | – | Oct 28, 2026 |
| If-So Dynamic Content Personalization | 1 | – | Nov 21, 2024 |
Exploited and recent CVEs
- CVE-2026-118164 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter 0.2%
- CVE-2026-104740 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute 0.2%
- CVE-2026-103996 If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute 0.2%
- CVE-2024-10796 If-So Dynamic Content Personalization <= 1.9.2.1 - Authenticated (Contributor+) Post Disclosure 0.5%