Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

Infility Global — Vulnerabilities & Security Advisories 11

All 11 CVE vulnerabilities found in Infility Global, with AI-generated Chinese analysis, references, and POCs.

Vendor: infility

CVE IDTitleCVSSSeverityPublished
CVE-2025-15268 Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass CWE-89 7.5 High2026-02-04
CVE-2025-68864 WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-01-22
CVE-2025-68865 WordPress Infility Global plugin <= 2.15.11 - SQL Injection vulnerability CWE-89 9.3 Critical2026-01-05
CVE-2025-12968 Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload CWE-434 8.8 High2025-12-12
CVE-2025-47650 WordPress Infility Global <= 2.15.09 - Arbitrary File Download vulnerability CWE-22 6.5 Medium2025-08-20
CVE-2025-47652 WordPress Infility Global plugin <= 2.13.4 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2025-07-16
CVE-2025-52774 WordPress Infility Global plugin <= 2.15.11 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2025-06-27
CVE-2025-47651 WordPress Infility Global plugin <= 2.15.11 - SQL Injection vulnerability CWE-89 8.5 High2025-06-09
CVE-2024-12723 Infility Global <= 2.9.8 - Reflected XSS 6.1 -2025-01-28
CVE-2024-11496 Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update CWE-862 6.5 Medium2025-01-07
CVE-2024-12290 Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter CWE-79 6.1 Medium2025-01-07

All 11 known CVE vulnerabilities affecting Infility Global with full Chinese analysis, references, and POCs where available.