wp_inventory_manager vulnerabilities

CVEs whose affected-version data names the wp_inventory_manager package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-17607Medium· 6.5

5d ago

The WP Inventory Manager plugin for WordPress is vulnerable to SQL Injection via the 'where' shortcode attribute of the [wpinventory] shortcode in versions up to, and including, 2.5.1

The WP Inventory Manager plugin for WordPress is vulnerable to SQL Injection via the 'where' shortcode attribute of the [wpinventory] shortcode in versions up to, and including, 2.5.1. This is due to insufficient escaping on the user-sup…

▾ Sunlitchuck1982 · WP Inventory ManagerEPSS 0.34%via NVD