InfiniteWP Client vulnerabilities
We track 1 vulnerability in InfiniteWP Client products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 9, 2026.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest InfiniteWP Client vulnerabilities
- 9.8 Critical severity
InfiniteWP Client: Improper Authentication
The InfiniteWP Client WordPress plugin before 1.13.6 does not properly verify the site-connection state and the authenticity of requests to its remote-management endpoint on WordPress Multisite installations, allowing unauthenticated attackers to bind their ow