Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: If-So Dynamic Content 1.10.2 Clear all filters
TI-2026-60008 CVE-2026-87973 · GHSA-627c-fv9j-9cxm

If-So Dynamic Content 1.9.9 - 1.10.1 - Editor+ Stored XSS via Conversion Name

Priority LOW 14

The If-So Dynamic Content WordPress plugin before 1.10.2 does not sanitize a conversion name before storing it, nor escape it when rendering the analytics page, allowing users with editor-level access to store JavaScript…

CVSS 3.1LOW 3.1 Network High privileges User interaction EPSS 0.00123 Published 2026-10-01 Fixed in 1.10.2 CWE-79
TI-2026-60007 CVE-2026-87970 · GHSA-4fx4-j9h4-c94x

If-So Dynamic Content 1.8 - 1.10.1 - Reflected XSS via render_ifso_shortcodes

Priority LOW 21

The If-So Dynamic Content WordPress plugin before 1.10.2 does not escape a request-supplied value before reflecting it in an unauthenticated AJAX response that is served as HTML, allowing attackers to execute arbitrary J…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.0017 Published 2026-10-01 Fixed in 1.10.2 CWE-79