Vulnerabilities

TI-2026-64674 CVE-2026-100507 · GHSA-gw84-6h89-7r4f

WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynami…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00175 Published 2026-09-30 No fix listed CWE-79

TI-2026-47200 CVE-2026-66446 · GHSA-gwhm-mmjm-gvpr

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

MEDIUM 46

Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.004 Published 2026-08-13 No fix listed CWE-89

TI-2025-36270 CVE-2025-58602 · GHSA-rx55-c747-39pw

WordPress If-So Dynamic Content Personalization Plugin <= 1.9.4 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Stored XSS.This issue affects If-So Dynamic C…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00209 Published 2025-09-03 No fix listed CWE-79

TI-2025-31790 CVE-2025-49875 · GHSA-xgvx-h98v-g4r4

WordPress If-So Dynamic Content Personalization plugin <= 1.9.3.1 - Cross Site Scripting (XSS) Vulnerability