Inisev
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BackupBliss – Backup & Migration with Free Cloud Storage | 8 | – | Apr 7, 2026 |
| Social Media Share Buttons & Social Sharing Icons | 5 | – | Oct 1, 2026 |
| Social Media & Share Icons | 4 | – | Aug 24, 2026 |
| Backup Migration | 3 | – | Aug 5, 2026 |
| Duplicate Post | 3 | – | Oct 1, 2026 |
| Social Share Icons & Social Share Buttons | 3 | – | Oct 10, 2026 |
| Pop-up | 2 | – | Jul 28, 2023 |
| Redirection | 2 | – | Jul 28, 2023 |
| Copy & Delete Posts | 1 | – | Jun 10, 2026 |
Exploited and recent CVEs
- CVE-2026-42697 WordPress Social Share Icons & Social Share Buttons plugin <= 3.7.5 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-89424 Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameter 0.2%
- CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL 0.3%
- CVE-2026-66623 WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-7693 Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter 3.0%
- CVE-2024-31435 WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.6 - Broken Access Control vulnerability 0.2%
- CVE-2026-39480 WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2026-53738 Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling Handler 0.2%
- CVE-2025-14944 Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage 0.6%
- CVE-2024-10932 Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace' 0.8%
- CVE-2023-34009 WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRF 0.5%
- CVE-2024-37552 WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-32686 WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability 0.4%
- CVE-2023-6266 Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure 2.1%
- CVE-2023-7002 Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url 30.8%
- CVE-2023-6972 Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion 1.4%
- CVE-2023-6553 Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution 97.8%
- CVE-2023-5070 Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure 1.5%
- CVE-2023-5602 Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery 0.3%
- CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function 0.7%
- CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function 0.7%
- CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function 0.7%
- CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function 0.7%
- CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function 0.7%
- CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function 0.7%
- CVE-2023-3977 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function 0.6%
- CVE-2023-3977 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function 0.6%
- CVE-2023-3977 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function 0.6%
- CVE-2023-3977 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function 0.6%
- CVE-2023-3977 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function 0.6%