PatchTheCVEinfinitumform vulnerabilities
Recent CVEs affecting infinitumform products. 3 tracked.
infinitumform has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-09-05. Highest priority: CVE-2024-3591 (score 43/100).
- CVE-2024-7381 MEDIUM 5.3 UPGRADE The Geo Controller plugin for WordPress is vulnerable to unauthorized shortcode execution due to missing autho
- CVE-2024-7380 MEDIUM 4.3 UPGRADE The Geo Controller plugin for WordPress is vulnerable to unauthorized menu creation/deletion due to missing ca
- CVE-2024-3591 MEDIUM 6.5 UPGRADE The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST
FAQ
How do I fix infinitumform vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is infinitumform being exploited right now?
None of the tracked infinitumform CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which infinitumform CVE should I patch first?
CVE-2024-3591 currently ranks highest (43/100): The Geo Controller WordPress plugin before 8.6.5 unserializes user input via some of its AJAX actions and REST.