SecAlerts
i

if-so

Security Risk Profile

38
/100
low

Security Risk Score

Comprehensive risk assessment based on 13 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from February 10, 2024 to present

13
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched

Threat Assessment

Avg CVSS
5.7
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
38/100
low
🆕 3Fresh (<7d)📈 7 in Last 30 Days

Severity Distribution

Critical
0
High
2
Medium
10
Low
1

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
3

Age Distribution

Common Weaknesses (CWE)

1
XSS
12

Most Affected Products

1. If-So Dynamic Content Personalization4
2. If-So If-So Dynamic Content – Elementor & All Page Builders Personalization3
3. If-So Dynamic Content3
4. If-So If-So Dynamic Content Personalization2
5. If-So Dynamic Content Personalization WordPress2

Recent Vulnerabilities

See more →
CVE-2026-118164
CVSS 6.4medium

If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter

Oct 28, 2026🔧 No Patch
CVE-2026-104740
CVSS 6.4medium

If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute

Oct 28, 2026🔧 No Patch
CVE-2026-103996
CVSS 6.4medium

If-So Dynamic Content <= 1.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute

Oct 28, 2026🔧 No Patch
CVE-2026-87971
CVSS 7.1high

If-So Dynamic Content 1.4.4 - 1.10.1 - Reflected XSS via 'message' Parameter

Oct 7, 2026🔧 No Patch
CVE-2026-87970
CVSS 4.7medium

If-So Dynamic Content 1.8 - 1.10.1 - Reflected XSS via render_ifso_shortcodes

Oct 1, 2026🔧 No Patch
CVE-2026-87973
CVSS 3.1low

If-So Dynamic Content 1.9.9 - 1.10.1 - Editor+ Stored XSS via Conversion Name

Oct 1, 2026🔧 No Patch
CVE-2026-100507
CVSS 7.1high

WordPress If-So Dynamic Content Personalization plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

Sep 30, 2026🔧 No Patch
CVE-2025-49875
CVSS 6.5EPSS 0%medium

WordPress If-So Dynamic Content Personalization plugin <= 1.9.3.1 - Cross Site Scripting (XSS) Vulnerability

Jun 17, 2025
CVE-2024-5440
CVSS 5.4medium

If-So Dynamic Content Personalization < 1.8.0.3 - Contributor+ Shortcode Stored XSS

May 15, 2025🔧 No Patch
CVE-2024-10796
CVSS 4.3medium

If-So Dynamic Content Personalization <= 1.9.2.1 - Authenticated (Contributor+) Post Disclosure

Nov 21, 2024🔧 No Patch

Monitor if-so in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.