infility_global vulnerabilities

CVEs whose affected-version data names the infility_global package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109931None

today

Infility Global < 2.16.25 - Unauthenticated Google Translate API Key Update

The Infility Global WordPress plugin before 2.16.25 does not perform any authorisation or nonce check on an AJAX action available to unauthenticated users, allowing any visitor to overwrite a machine-translation configuration value belon…

▾ Sunlitvia CVEORG