Volerion logoVolerion
Volerion logoVolerion

Infility Global WordPress Plugin Missing Authorization Vulnerability in Options Update

Vulnerability

A vulnerability exists in the Infility Global plugin for WordPress, affecting all versions through 2.9.8. The issue arises from a lack of proper capability checks in the 'infility_global_ajax' function, allowing authenticated attackers with Subscriber-level access or higher to unauthorizedly modify plugin options. This could potentially disrupt the site's functionality.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in plugin settings, potentially causing disruptions or malfunctions on the WordPress site.

Remediation

Users can update to version 2.9.9 or a newer patched version to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
0.6
exploitability
6.1
remediation
7.7
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.