Vulnerabilities / WP Plugin Info Card
WP Plugin Info Card vulnerabilities
Advisories WPSec published for WP Plugin Info Card. Other sources may list more. Its attack surface: WP Plugin Info Card on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0671 | WP Plugin Info Card <= 6.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'layout' and 'expiration' Shortcode Attributes | Medium 6.4 | 6.4.0 |
License: CC BY 4.0