Skip to content
Noroxi

InfiniteWP Client

iwp-client · plugin

Known security vulnerabilities for InfiniteWP Client. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

1 with public exploit code · latest Sep 18, 2026

Vulnerabilities

  • CVE-2026-74011

    WordPress InfiniteWP Client plugin <= 1.13.9 - SQL Injection vulnerability

    High 7.6

  • CVE-2026-17576

    InfiniteWP Client <= 1.13.9 - Authenticated (Admin+) SQL Injection via 'iwp_get_comments_*' Array Key

    Medium 6.5

  • CVE-2023-6565

    InfiniteWP Client <= 1.12.3 - Unauthenticated Sensitive Information Exposure

    Medium 5.9

  • CVE-2024-10585

    InfiniteWP Client <= 1.13.0 - Unauthenticated Limited Directory Traversal to Arbitrary .txt File Reading

    Medium 5.3

  • CVE-2023-2916

    InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure

    Medium 5.3

← Back to directory