Inisev develops a focused suite of WordPress plugins centered on content redirection, widget functionality, and social-media integration. The vulnerability profile reflects the web-application context of these plugins, with recurring weaknesses in cross-site scripting, cross-site request forgery, and missing authorization checks that are typical of client-side and form-handling logic in WordPress extensions. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Inisev over time
Signals from CVEs in this vendor scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-5602HIGH The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.5. This is due to m | Oct 20, 2023 | 8.8 | 25 | NO | NO |
CVE-2023-5070MEDIUM The Social Media Share Buttons & Social Sharing Icons plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.8.5 via the sfsi_save | Oct 20, 2023 | 6.5 | 22 | NO | NO |
CVE-2023-1331MEDIUM The Redirection WordPress plugin before 1.1.5 does not have CSRF checks in the uninstall action, which could allow attackers to make logged in admins delete all the redirections th | Apr 17, 2023 | 6.5 | 22 | NO | NO |
CVE-2023-1330MEDIUM The Redirection WordPress plugin before 1.1.4 does not add nonce verification in place when adding the redirect, which could allow attackers to add redirects via a CSRF attack. | Apr 3, 2023 | 6.5 | 22 | NO | NO |
CVE-2024-0559MEDIUM The Enhanced Text Widget WordPress plugin before 1.6.6 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high pri | Mar 11, 2024 | 6.5 | 19 | NO | NO |
CVE-2024-2118MEDIUM The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 2.8.9 does not sanitise and escape some of its settings, which could allow high privilege users such a | Apr 17, 2024 | 5.9 | 18 | NO | NO |
CVE-2024-37552MEDIUM Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Inisev Social Media & Share Icons allows Stored XSS.This issue affects | Jul 21, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-0561MEDIUM The Ultimate Posts Widget WordPress plugin before 2.3.1 does not validate and escape some of its Widget options before outputting them back in attributes, which could allow high pr | Mar 11, 2024 | 5.4 | 17 | NO | NO |
CVE-2023-3977MEDIUM Several plugins for WordPress by Inisev are vulnerable to Cross-Site Request Forgery to unauthorized installation of plugins due to a missing nonce check on the handle_installation | Jul 28, 2023 | 4.3 | 17 | NO | NO |
CVE-2023-0958MEDIUM Several plugins for WordPress by Inisev are vulnerable to unauthorized installation of plugins due to a missing capability check on the handle_installation function that is called | Jul 28, 2023 | 6.5 | 17 | NO | NO |
Signals from CVEs in this vendor scope (11 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Inisev.
Media articles that mention a CVE ID that affects a product developed by Inisev — matched by CVE ID, not by vendor name.