CVE-2026-74011highCWE-89

CVE-2026-74011: falha de alta gravidade em revmakx InfiniteWP Client

WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability

Publicada em

Seguir esta CVE+ Monitorar InfiniteWP Client

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.6epss 0.4%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in revmakx InfiniteWP Client allows Blind SQL Injection. This issue affects InfiniteWP Client: from n/a through 1.13.9.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
revmakx · InfiniteWP Client
CVEs relacionadas — revmakx InfiniteWP Client

No mesmo produto, das mais perigosas para as menos.

CVE-2023-2916HIGHInfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information ExposureEPSS 24.0%CVE-2024-10585MEDIUMInfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File ReadingEPSS 0.7%CVE-2023-6565MEDIUMInfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information ExposureEPSS 0.6%CVE-2026-17576MEDIUMInfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array KeyEPSS 0.5%