Invelity vulnerabilities
We track 3 vulnerabilities in Invelity products across 3 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2026.
Latest Invelity vulnerabilities
- 8.1 High severity
Invelity Product Feeds: Cross-Site Request Forgery
The Invelity Product Feeds plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 1.2.6. This is due to missing validation and sanitization in the 'createManageFeedPage' function. This makes it po
- 7.1 High severity
Invelity SPS connect: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in INVELITY Invelity SPS connect invelity-sps-connect allows Reflected XSS.This issue affects Invelity SPS connect: from n/a through <= 1.0.8.
- 8.8 High severity
Invelity MyGLS connect: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in INVELITY Invelity MyGLS connect invelity-mygls-connect allows Object Injection.This issue affects Invelity MyGLS connect: from n/a through <= 1.1.1.