Infinitewp
Approved changes feed: RSS · Atom
cpe:2.3:a:infinitewp:infinitewp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Infinitewp (ef7504bc-3422-59c2-9064-04a47c5fd33b) |
|---|---|
| Product | Infinitewp (7bc2431b-e8af-51c8-9a8e-4f2eab9d4171) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-28642 |
vulnerable | 2026-06-08 05:23:56.290084 |
Details available
In InfiniteWP Admin Panel before 3.1.12.3, resetPasswordSendMail generates a weak password-reset code, which makes it easier for remote attackers to conduct admin Account Takeover attacks.
Published: 2020-11-16T01:19:27.000Z
Updated: 2024-08-04T16:40:59.803Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9521 |
vulnerable | 2026-06-08 05:06:12.102088 |
Details available
Unrestricted file upload vulnerability in uploadScript.php in InfiniteWP Admin Panel before 2.4.4, when the allWPFiles query parameter is set, allows remote attackers to execute arbitrary code by uploading a file with a double extension, then accessing it via a direct request to the file in the uploads directory, as demonstrated by the .php.swp filename.
Published: 2015-01-05T20:00:00.000Z
Updated: 2024-09-16T23:11:01.143Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9520 |
vulnerable | 2026-06-08 05:06:12.101802 |
Details available
SQL injection vulnerability in execute.php in InfiniteWP Admin Panel before 2.4.4 allows remote attackers to execute arbitrary SQL commands via the historyID parameter.
Published: 2015-01-05T20:00:00.000Z
Updated: 2024-09-17T02:27:14.139Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-9519 |
vulnerable | 2026-06-08 05:06:12.101419 |
Details available
SQL injection vulnerability in login.php in InfiniteWP Admin Panel before 2.4.3 allows remote attackers to execute arbitrary SQL commands via the email parameter.
Published: 2015-01-05T20:00:00.000Z
Updated: 2024-09-16T22:15:56.445Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.