What’s Vulnerable › Products

WP Inventory Manager vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your WP Inventory Manager version is affected

Latest WP Inventory Manager vulnerabilities

• CVE-2026-90887 — WordPress WP Inventory Manager plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-57772 — WordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerability (CVSS 8.5)
• CVE-2025-49977 — WordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 4.3)