Skip to content
Noroxi

WP Inventory Manager

wp-inventory-manager · plugin

Known security vulnerabilities for WP Inventory Manager. Find out in seconds which version runs on your site with WP Lens.

6 known vulnerabilities

latest Sep 18, 2026

Vulnerabilities

  • CVE-2023-34002

    WordPress WP Inventory Manager Plugin <= 2.1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)

    High 8.8

  • CVE-2026-57772

    WordPress WP Inventory Manager plugin <= 2.4.0 - SQL Injection vulnerability

    High 8.5

  • CVE-2026-90887

    WordPress WP Inventory Manager plugin <= 2.5.4 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-17607

    WP Inventory Manager <= 2.5.1 - Authenticated (Contributor+) SQL Injection via 'where' Shortcode Attribute

    Medium 6.5

  • CVE-2024-13434

    WP Inventory Manager <= 2.3.2 - Reflected Cross-Site Scripting

    Medium 6.1

  • CVE-2025-49977

    WordPress WP Inventory Manager plugin <= 2.3.4 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 4.3

← Back to directory