Vulnerabilities

TI-2026-01680 CVE-2026-2023 · GHSA-pj33-46c7-rm7p

WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation

LOW 19

The WP Plugin Info Card plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00181 Published 2026-02-18 No fix listed CWE-352

TI-2025-04586 CVE-2025-5116 · GHSA-fqj9-7f6j-j2hx

WP Plugin Info Card <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter

LOW 28

The WP Plugin Info Card plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘containerid’ parameter in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output esca…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00301 Published 2025-06-03 No fix listed CWE-79

Vulnerabilities

Filters

WP Plugin Info Card <= 6.2.0 - Cross-Site Request Forgery to Arbitrary Custom Plugin Entry Creation

WP Plugin Info Card <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via containerid Parameter