WP Inventory vulnerabilities
We track 2 vulnerabilities in WP Inventory products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 9, 2026.
2vulnerabilities
0critical
2high
0exploited
7.8average CVSS score
Latest WP Inventory vulnerabilities
- 7.1 High severity
WP Inventory Manager: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Reflected XSS.This issue affects WP Inventory Manager: from n/a through 2.5.9.
- 8.5 High severity
WP Inventory Manager: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Inventory WP Inventory Manager wp-inventory-manager allows Blind SQL Injection.This issue affects WP Inventory Manager: from n/a through <= 2.4.0.