Xfinitysoft

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xfinitysoft records in CISA KEV

No Xfinitysoft vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2025-12856 CVE-2025-14070 · GHSA-mpqx-xpq7-hgwg

Reviewify <= 1.0.7 - Missing Authorization to Authenticated (Contributor+) Arbitrary WooCommerce Coupon Creation

LOW 39

The Reviewify plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'send_test_email' AJAX action in all versions up to, and including, 1.0.7.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00423 Published 2026-01-07 No fix listed CWE-862

TI-2024-21555 CVE-2024-32675 · GHSA-prcq-ggcw-29jg

WordPress Order Limit for WooCommerce plugin <= 2.0.0 - Broken Access Control vulnerability

LOW 37

Missing Authorization vulnerability in Xfinity Soft Order Limit for WooCommerce.This issue affects Order Limit for WooCommerce: from n/a through 2.0.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00438 Published 2024-04-24 No fix listed CWE-862

TI-2025-19799 CVE-2025-26928 · GHSA-227g-p58c-6fwx

WordPress Order Limit for WooCommerce plugin <= 3.0.2 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Xfinitysoft Order Limit for WooCommerce wc-order-limit-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Order Limit for WooCommerce: f…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00307 Published 2025-02-25 No fix listed CWE-862

TI-2025-16563 CVE-2025-22681 · GHSA-3f7x-84v6-xqm2

WordPress Content Cloner plugin <= 1.0.1 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Xfinitysoft Content Cloner super-seo-content-cloner allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Cloner: from n/a through <= 1.…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2025-02-03 No fix listed CWE-862

TI-2025-33887 CVE-2025-54042 · GHSA-665v-mvxf-32w4

WordPress WP Post Hide plugin <= 1.0.9 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in Xfinitysoft WP Post Hide wp-post-hide allows Cross Site Request Forgery.This issue affects WP Post Hide: from n/a through <= 1.0.9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00145 Published 2025-07-16 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0