Infility Global

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Infility Global

Information

Software Type Plugin
Software Slug infility-global (view on wordpress.org)
Software Status Active
Software Author infility
Software Website www.infility.cn
Software Downloads 14,500
Software Active Installs 100
Software Record Last Updated July 21, 2026

13 Vulnerabilities

Submit a Vulnerability
Infility Global < 2.15.19 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2026-8163
Jun 25, 2026
Researcher: TRAN THE LONG
Infility Global < 2.15.20 - Authenticated (Editor+) SQL Injection
4.9
CVE-2026-7842
Jun 25, 2026
Researcher: Mustafa Ahmed
Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter
6.5
CVE-2026-8685
May 19, 2026
Researcher: oolongeya
Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass
7.5
CVE-2025-15268
Feb 3, 2026
Researcher: andrea bocchetti
Infility Global <= 2.14.49 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2025-68864
Jan 15, 2026
Researcher: Drew Webber (mcdruid)
Infility Global <= 2.14.49 - Unauthenticated SQL Injection
7.5
CVE-2025-68865
Dec 31, 2025
Researcher: Drew Webber (mcdruid)
Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload
8.8
CVE-2025-12968
Dec 11, 2025
Researcher: kr0d
Infility Global <= 2.14.7 - Authenticated (Subscriber+) Arbitrary File Download
6.5
CVE-2025-47650
Aug 14, 2025
Researcher: Martino Spagnuolo
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting
6.1
CVE-2025-47652
Jul 7, 2025
Researcher: Martino Spagnuolo
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting
6.1
CVE-2025-52774
Jun 23, 2025
Researcher: Abdulsamad Yusuf (0xVenus)
Infility Global <= 2.12.7 - Authenticated (Subscriber+) SQL Injection
6.5
CVE-2025-47651
May 29, 2025
Researcher: astra.r3verii
Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update
6.5
CVE-2024-11496
Jan 6, 2025
Researcher: Francesco Carlucci
Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter
6.1
CVE-2024-12290
Jan 6, 2025
Researcher: vgo0
Title Status CVE ID CVSS Researchers Date
Infility Global < 2.15.19 - Authenticated (Subscriber+) SQL Injection Patched CVE-2026-8163 6.5 TRAN THE LONG June 25, 2026
Infility Global < 2.15.20 - Authenticated (Editor+) SQL Injection Patched CVE-2026-7842 4.9 Mustafa Ahmed June 25, 2026
Infility Global <= 2.15.16 - Authenticated (Subscriber+) SQL Injection via 'orderby' Parameter Unpatched CVE-2026-8685 6.5 oolongeya May 19, 2026
Infility Global <= 2.14.46 - Unauthenticated SQL Injection via Predictable API Key and IP Whitelist Bypass Unpatched CVE-2025-15268 7.5 andrea bocchetti February 3, 2026
Infility Global <= 2.14.49 - Unauthenticated Stored Cross-Site Scripting Unpatched CVE-2025-68864 7.2 Drew Webber (mcdruid) January 15, 2026
Infility Global <= 2.14.49 - Unauthenticated SQL Injection Unpatched CVE-2025-68865 7.5 Drew Webber (mcdruid) December 31, 2025
Infility Global <= 2.14.42 - Authenticated (Subscriber+) Arbitrary File Upload Patched CVE-2025-12968 8.8 kr0d December 11, 2025
Infility Global <= 2.14.7 - Authenticated (Subscriber+) Arbitrary File Download Unpatched CVE-2025-47650 6.5 Martino Spagnuolo August 14, 2025
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting Patched CVE-2025-47652 6.1 Martino Spagnuolo July 7, 2025
Infility Global <= 2.13.4 - Reflected Cross-Site Scripting Unpatched CVE-2025-52774 6.1 Abdulsamad Yusuf (0xVenus) June 23, 2025
Infility Global <= 2.12.7 - Authenticated (Subscriber+) SQL Injection Unpatched CVE-2025-47651 6.5 astra.r3verii May 29, 2025
Infility Global <= 2.9.8 - Authenticated (Subscriber+) Missing Authorization to Plugin Options Update Patched CVE-2024-11496 6.5 Francesco Carlucci January 6, 2025
Infility Global <= 2.9.8 - Reflected Cross-Site Scripting via set_type Parameter Patched CVE-2024-12290 6.1 vgo0 January 6, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation