Vulnerabilities in xfinitysoft

4 results

CVE-2025-14070HIGHReviewify <= 1.0.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary WooCommerce Coupon CreationEPSS 0.4%CVE-2025-22681MEDIUMWordPress Content Cloner plugin <= 1.0.1 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-26928MEDIUMWordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2025-54042MEDIUMWordPress WP Post Hide plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) VulnerabilityEPSS 0.1%