Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

inisev — Vulnerabilities & Security Advisories 20

Browse all 20 CVE security advisories affecting inisev. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Inisev is a software platform primarily used for enterprise content management and workflow automation. Historically, it has been vulnerable to multiple remote code execution flaws, cross-site scripting attacks, and privilege escalation vulnerabilities, accounting for its 13 recorded CVEs. The platform's complex architecture and extensive plugin ecosystem have contributed to recurring security issues, particularly in input validation and access control. While no major public security incidents have been widely documented, the consistent pattern of vulnerabilities suggests potential risks in environments where the software handles sensitive data or integrates with critical systems. Organizations implementing Inisev should prioritize timely patching and harden configurations against common exploitation vectors.

CVE ID Title CVSS Severity Published
CVE-2026-89424 Duplicate Post <= 1.5.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'noti_token' Parameter — Duplicate Post CWE-79 6.4 Medium 2026-10-01
CVE-2026-89047 Social Media Share Buttons & Social Sharing Icons <= 3.0.1 - Reflected DOM-Based Cross-Site Scripting via URL — Social Media Share Buttons & Social Sharing Icons CWE-79 6.1 Medium 2026-10-01
CVE-2026-66623 WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability — Social Media & Share Icons CWE-79 7.1 High 2026-08-24
CVE-2026-7693 Backup Migration <= 2.1.5.1 - Authenticated (Administrator+) OS Command Injection via 'file' Parameter — Backup Migration CWE-77 7.2 High 2026-08-05
CVE-2024-31435 WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.6 - Broken Access Control vulnerability — Social Media & Share Icons CWE-862 4.3 Medium 2026-06-17
CVE-2026-39480 WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability — Backup Migration CWE-201 7.5 High 2026-06-15
CVE-2026-53738 Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling Handler — Copy & Delete Posts CWE-863 8.1 High 2026-06-10
CVE-2025-14944 Backup Migration <= 2.0.0 - Missing Authorization to Unauthenticated Backup Upload to Offline Storage — BackupBliss – Backup & Migration with Free Cloud Storage CWE-862 5.3 Medium 2026-04-07
CVE-2024-10932 Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace' — BackupBliss – Backup & Migration with Free Cloud Storage CWE-502 8.8 High 2025-01-04
CVE-2023-34009 WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.8.1 - Broken Access Control + CSRF — Social Media & Share Icons CWE-862 4.3 Medium 2024-12-13
CVE-2024-37552 WordPress Social Media Share Buttons & Social Sharing Icons plugin <= 2.9.1 - Cross Site Scripting (XSS) vulnerability — Social Media & Share Icons CWE-79 5.9 Medium 2024-07-21
CVE-2024-32686 WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability — Backup Migration CWE-532 5.3 Medium 2024-04-18
CVE-2023-6266 Backup Migration <= 1.3.6 - Unauthenticated Arbitrary Backup Download to Sensitive Information Exposure — BackupBliss – Backup & Migration with Free Cloud Storage CWE-200 7.5 High 2024-01-11
CVE-2023-7002 Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url — BackupBliss – Backup & Migration with Free Cloud Storage CWE-78 7.2 High 2023-12-23
CVE-2023-6972 Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion — BackupBliss – Backup & Migration with Free Cloud Storage CWE-22 9.8 Critical 2023-12-23
CVE-2023-6553 Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution — BackupBliss – Backup & Migration with Free Cloud Storage CWE-94 9.8 Critical 2023-12-15
CVE-2023-5070 Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure — Social Media Share Buttons & Social Sharing Icons CWE-200 6.5 Medium 2023-10-20
CVE-2023-5602 Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery — Social Media Share Buttons & Social Sharing Icons CWE-352 4.3 Medium 2023-10-20
CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function — Redirection CWE-862 4.3 Medium 2023-07-28
CVE-2023-3977 Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function — Redirection CWE-352 4.3 Medium 2023-07-28

This page lists every published CVE security advisory associated with inisev. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.