iSape
iSape has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for iSape has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.
All of these findings were reported by Skalucy. iSape is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 3.
CVE-2025-68847iSape <= 0.72 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records
iSape
Author
itex
en Plugin iSape is meant for the sale of conventional and contextual links in Sape.ru. Features: Support for both conventional and contextual links. Placing links up to the text of page, after page of text in the widget and footer. Widget course customizable. Automatic installation of a plug and the rights to the sape folder on request. Adjustment of amount of displayed links depending on the location. ru Плагин iSape предназначен для продажи обычных и контекстных ссылок в Sape.ru Возможности: Поддержка как обычных, так и контекстных ссылок. Размещение ссылок до текста страницы, после текста страницы, в виджетах и футере. Виджет конечно настраиваемый. Автоматическая установка плагина и прав на папку сапы по желанию. Регулировка количества показываемых ссылок в зависимости от места расположения. Arbitrary section – A brief Markdown Example –
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C