iSape

iSape has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for iSape has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Skalucy. iSape is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.

Strategic Overview

Avg CVSSMedium
6.1/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all iSape vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2025-68847

iSape <= 0.72 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv0.72 (02-05-2010)
5.0(2)
100/100
Last Updated
2012-08-01 (14y ago)
Active Installs
100+
Downloads
53,965
Requires WP
2.3+
Requires PHP
0+
Tested up to
WP 3
Created
2008-11-09 (18y ago)

en Plugin iSape is meant for the sale of conventional and contextual links in Sape.ru. Features: Support for both conventional and contextual links. Placing links up to the text of page, after page of text in the widget and footer. Widget course customizable. Automatic installation of a plug and the rights to the sape folder on request. Adjustment of amount of displayed links depending on the location. ru Плагин iSape предназначен для продажи обычных и контекстных ссылок в Sape.ru Возможности: Поддержка как обычных, так и контекстных ссылок. Размещение ссылок до текста страницы, после текста страницы, в виджетах и футере. Виджет конечно настраиваемый. Автоматическая установка плагина и прав на папку сапы по желанию. Регулировка количества показываемых ссылок в зависимости от места расположения. Arbitrary section – A brief Markdown Example –

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C