CVE-2020-8772

The CVE-2020-8772 entry concerns the WordPress InfiniteWP Client plugin prior to 1.9.4.5, which contains a missing authorization check in iwp_mmb_set_request (init.php). Exploitation allows an attacker who knows an administrator’s username to log in as that user, enabling access to sensitive info...

CVE-2024-10585

CVE-2024-10585 affects the InfiniteWP Client plugin for WordPress. The vulnerability is a path traversal issue in all versions up to and including 1.13.0, exploitable via the historyID parameter of the “~/debug-chart/index.php” file, enabling unauthenticated reading of arbitrary .txt files outsid...

CVE-2023-2916

Affected software : WordPress InfiniteWP Client Plugin for WordPress (

CVE-2023-6565

The CVE-2023-6565 issue affects the InfiniteWP Client WordPress plugin (versions

CVE-2016-15004

CVE-2016-15004 affects InfiniteWP Client Plugin for WordPress (versions around 1.5.1.3/1.6.0). The vulnerability type is an injection caused by an unknown faulty functionality, permitting a remote attack. Supported by connected documents, the issue is addressed by upgrading to version 1.6.1.1. Ex...