iMoney

iMoney has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for iMoney has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Skalucy. iMoney is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.4.2.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all iMoney vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-69392

iMoney <= 0.36 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2026-02-11 00:00	iMoney <= 0.36 - Reflected Cross-Site Scripting iMoney <= 0.36	`CVE-2025-69392`	6.1 Medium	Skalucy	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv0.36 (01-08-2012)

iMoney

Author

itex

0.0(0)

0/100

Last Updated

2012-08-01 (14y ago)

Active Installs

100+

Downloads

46,471

Requires WP

2.3+

Requires PHP

Tested up to

WP 3.4.2

Created

2008-11-30 (18y ago)

Plugin iMoney is meant for monetize your blog using Adsense, sape.ru, tnx.net and other systems. Features: Placing Ads or links up to the text of page, after page of text in the widget and footer. Widget course customizable. Automatic installation of a plug and the rights to the sape and tnx folder on request. Adjustment of amount of displayed links depending on the location. Arbitrary section – A brief Markdown Example –

View on WordPress.org