If-So Dynamic Content vulnerabilities

🔔 Create alert RSS

Published CVEs affecting If-So Dynamic Content products: 2 record(s), with severity, exploitation and fixes.

If-So Dynamic Content Personalization 2

Exploited only (KEV) →

CVE-2026-100507 High · 7.1 CWE-79 Sep 30, 2026

WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in If-So Dynamic Content If-So Dynamic Content Personalization if-so allows Reflected XSS.This issue affects If-So Dynamic Content Personalization: from n/a through 1.10.1.

CVE-2026-66446 Critical · 9.3 CWE-89 Aug 13, 2026

WordPress If-So Dynamic Content Personalization plugin <= 1.10 - SQL Injection vulnerability

Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.