Description

WordPress Plugin InfiniteWP Client is prone to an unspecified vulnerability. No available information exists regarding this issue and it's impact on a vulnerable website. WordPress Plugin InfiniteWP Client version 1.3.14 is vulnerable; prior versions may also be affected.

Remediation

Update to plugin version 1.3.15 or latest

References

https://wordpress.org/plugins/iwp-client/changelog/

Related Vulnerabilities

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-1804)

Oracle JRE CVE-2012-1725 Vulnerability (CVE-2012-1725)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-2643)

WordPress Plugin AddToAny Share Buttons Cross-Site Scripting (1.7.45)

WordPress Plugin WooCommerce Cross-Site Scripting (3.5.4)

Severity

High

Tags

Missing Update