INVELITY
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Invelity MyGLS connect | 1 | – | Sep 5, 2025 |
| Invelity Product Feeds | 1 | – | Mar 21, 2026 |
| Invelity SPS connect | 1 | – | Dec 29, 2025 |
Exploited and recent CVEs
- CVE-2025-14037 Invelity Products Feeds <= 1.2.6 - Cross-Site Request Forgery to Arbitrary File Deletion 0.2%
- CVE-2025-68876 WordPress Invelity SPS connect plugin <= 1.0.8 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-58833 WordPress Invelity MyGLS connect Plugin <= 1.1.1 - Cross Site Request Forgery (CSRF) Vulnerability 0.2%