Vulnerabilities in Infility
11 resultsCVE-2025-12968HIGHInfility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File UploadEPSS 0.5%CVE-2025-15268HIGHInfility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist BypassEPSS 0.4%CVE-2025-47650MEDIUMWordPress Infility Global <= 2.15.06 - Arbitrary File Download vulnerabilityEPSS 0.4%CVE-2026-8685MEDIUMInfility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' ParameterEPSS 0.4%CVE-2024-12290MEDIUMInfility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type ParameterEPSS 0.4%CVE-2024-11496MEDIUMInfility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options UpdateEPSS 0.3%CVE-2025-47651HIGHWordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-68864HIGHWordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-47652HIGHWordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-68865CRITICALWordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-52774HIGHWordPress Infility Global plugin <= 2.15.06 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%