infornweb vulnerabilities
5 published CVEs name infornweb among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2025-31082
WordPress News & Blog Designer Pack plugin <= 4.0 - Local File Inclusion vulnerability
InfornWeb · News & Blog Designer Pack
High8.1 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2024-23502
WordPress Posts List Designer by Category – List Category Posts Or Recent Posts Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)
InfornWeb · Posts List Designer by Category – List Category Posts Or Recent Posts
Medium6.5 - CVE-2023-5815
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
infornweb · Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News
High8.1