PT-2015-4261

Name of the Vulnerable Software and Affected Versions InfiniteWP Admin Panel versions prior to 2.4.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the historyID parameter in the "execute.php" file. Recommendations For versions prior to 2.4.4...

InfiniteWP SQL Injection / File Upload / Insecure Password Storage

Multiple vulnerabilities in InfiniteWP Admin Panel https://lifeforms.nl/20141210/infinitewp-vulnerabilities/ ----- InfiniteWP http://www.infinitewp.com/ allows an administrator to manage multiple Wordpress sites from one control panel. According to the InfiniteWP homepage, it is used on over...

InfiniteWP Client <= 1.3.7 - Privilege Escalation

The InfiniteWP Client WordPress plugin was affected by a Privilege Escalation security vulnerability...

WordPress InfiniteWP Client Plugin <= 1.3.7 - Privilege Escalation

Because of this vulnerability, Javascript or iframe malware, spam links or defacement messages could be injected. Solution Upgrade the plugin...