What’s Vulnerable › Products

Infility Global vulnerabilities

16 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Check whether your Infility Global version is affected

Latest Infility Global vulnerabilities

CVE-2026-109931 — Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update (CVSS 3.7)
CVE-2026-10734 — Infility Global <= 2.15.21 - Unauthenticated Stored Cross-Site Scripting via /cf7_record Log Endpoint (CVSS 7.2)
CVE-2026-8163 — Infility Global < 2.15.19 - Subscriber+ SQL Injection via order Parameter (CVSS 8.8)
CVE-2026-7842 — Infility Global < 2.15.20 - Editor+ SQL Injection via orderby Parameter (CVSS 6.8)
CVE-2026-8685 — Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter (CVSS 6.5)
CVE-2025-15268 — Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass (CVSS 7.5)
CVE-2025-68864 — WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
CVE-2025-68865 — WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability (CVSS 9.3)
CVE-2025-12968 — Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload (CVSS 8.8)
CVE-2025-47650 — WordPress Infility Global <= 2.15.06 - Arbitrary File Download vulnerability (CVSS 6.5)
CVE-2025-47652 — WordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
CVE-2025-52774 — WordPress Infility Global plugin <= 2.15.06 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
CVE-2025-47651 — WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability (CVSS 8.5)
CVE-2024-12723 — Infility Global <= 2.9.8 - Reflected XSS (CVSS 6.1)
CVE-2024-12290 — Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter (CVSS 6.1)
CVE-2024-11496 — Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update (CVSS 6.5)