EUVD-2026-38416

The Infility Global Infility Global WordPress plugin before 2.15.20 for WordPress does not sanitize or validate the orderby and order parameters in the importlist, urldetail, and filedetail admin page callbacks before using them in SQL queries, allowing authenticated attackers with Editor-level...

CVE-2026-7842

The Infility Global WordPress plugin (versions before 2.15.20 ) is vulnerable to time-based blind SQL injection . The root cause is a failure to sanitize or validate the orderby and order parameters within the import_list(), url_detail(), and file_detail() admin page callbacks before they are uti...