Vendor

    Inisev

    28 known vulnerabilities in products by Inisev, 0 of them actively exploited (CISA KEV).

    Key figures

    28

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Inisev
    CriticalCVE-2023-6553

    Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

    also in 1 other product

    		9.8
    HighCVE-2026-7693

    Inisev Backup Migration: Command Injection

    		7.2
    HighCVE-2023-7002

    Backup Migration <= 1.3.9 - Authenticated (Admin+) OS Command Injection via url

    also in 1 other product

    		7.2
    CriticalCVE-2023-6972

    Backup Migration <= 1.3.9 - Unauthenticated Path Traversal to Arbitrary File Deletion

    also in 1 other product

    		9.8
    HighCVE-2023-6266

    Inisev BackupBliss: Exposure of Sensitive Information to an Unauthorized Actor

    also in 1 other product

    		7.5
    MediumCVE-2023-5070

    Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure

    also in 1 other product

    		6.5
    HighCVE-2024-10932

    Backup Migration <= 1.4.6 - Unauthenticated PHP Object Injection via 'recursive_unserialize_replace'

    		8.8
    HighCVE-2026-42697

    Inisev Social Share Icons & Social Share Buttons: Cross-site Scripting

    		7.1
    HighCVE-2026-127050

    Backup Migration before 2.1.8 Path Traversal via PclZip Restore Fallback

    		6.4
    HighCVE-2026-39480

    WordPress Backup Migration plugin <= 2.1.1 - Sensitive Data Exposure vulnerability

    		7.5
    MediumCVE-2026-89047

    Inisev Social Media Share Buttons & Social Sharing Icons: Cross-site Scripting

    		6.1
    MediumCVE-2026-89424

    Inisev Duplicate Post: Cross-site Scripting

    		6.4
    HighCVE-2026-53738

    Copy & Delete Posts through 1.5.4 Privilege Escalation via cdp_action_handling Handler

    		8.1
    MediumCVE-2025-14944

    Inisev BackupBliss: Missing Authorization

    		5.3
    HighCVE-2026-66623

    WordPress Social Media & Share Icons plugin <= 2.9.9 - Cross Site Scripting (XSS) vulnerability

    		7.1
    MediumCVE-2024-0559

    Enhanced Text Widget < 1.6.6 - Admin+ Stored XSS

    		6.5
    MediumCVE-2023-0958

    Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function

    also in 6 other products

    		4.3
    MediumCVE-2023-3977

    Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function

    also in 6 other products

    		4.3
    MediumCVE-2024-2118

    Social Media Share Buttons < 2.8.9 - Admin+ Stored XSS via settings

    		5.9
    MediumCVE-2024-0561

    Ultimate Posts Widget < 2.3.1 - Admin+ Stored XSS

    		5.4
    MediumCVE-2024-32686

    WordPress Backup Migration plugin <= 1.4.3 - Sensitive Data Exposure via Log vulnerability

    		5.3
    MediumCVE-2023-34009

    Inisev Social Media & Share Icons: Missing Authorization

    		4.3
    MediumCVE-2023-1330

    Redirection < 1.1.4 - Redirect Creation via CSRF

    		6.5
    MediumCVE-2024-31435

    Inisev Social Media & Share Icons: Missing Authorization

    		4.3
    MediumCVE-2023-1331

    Redirection < 1.1.5 - Plugin Reset via CSRF

    		6.5

    All vulnerabilities in search

    Products

    Products by Inisev
    Backupbliss – Backup & Migration With Free Cloud Storage80
    Social Media Share Buttons & Social Sharing Icons80
    Backup Migration40
    Redirection40
    Social Media & Share Icons40
    Duplicate Post30
    Enhanced Text Widget30
    Social Share Icons & Social Share Buttons30
    Ultimate Posts Widget30