Xfinitysoft vulnerabilities
4 published CVEs name Xfinitysoft among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-14070
Reviewify <= 1.0.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary WooCommerce Coupon Creation
xfinitysoft · Reviewify — Review Discounts & Photo/Video Reviews for WooCommerce
High7.5 - CVE-2025-54042
WordPress WP Post Hide plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) Vulnerability
Xfinitysoft · WP Post Hide
Medium4.3 - CVE-2025-26928
WordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerability
Xfinitysoft · Order Limit for WooCommerce
Medium4.3 - CVE-2025-22681
WordPress Content Cloner plugin <= 1.0.1 - Broken Access Control vulnerability
Xfinitysoft · Content Cloner
Medium4.3