infility vulnerabilities

12 published CVEs name infility among the affected products.

Critical 1High 7Medium 4Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-10734
Infility Global <= 2.15.21 - Unauthenticated Stored Cross-Site Scripting via /cf7_record Log Endpoint
infility · Infility Global
High7.2
CVE-2026-8685
Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
infility · Infility Global
Medium6.5
CVE-2025-15268
Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass
infility · Infility Global
High7.5
CVE-2025-68864
WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability
Infility · Infility Global
High7.1
CVE-2025-68865
WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability
Infility · Infility Global
Critical9.3
CVE-2025-12968
Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload
infility · Infility Global
High8.8
CVE-2025-47650
WordPress Infility Global <= 2.15.06 - Arbitrary File Download vulnerability
Infility · Infility Global
Medium6.5
CVE-2025-47652
WordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerability
Infility · Infility Global
High7.1
CVE-2025-52774
WordPress Infility Global plugin <= 2.15.06 - Cross Site Scripting (XSS) vulnerability
Infility · Infility Global
High7.1
CVE-2025-47651
WordPress Infility Global plugin <= 2.15.06 - SQL Injection vulnerability
Infility · Infility Global
High8.5