WordPress plugin

If-So Dynamic Content – Elementor & All Page Builders Personalization security & vulnerabilities

Q: Is any If-So Dynamic Content – Elementor & All Page Builders Personalization vulnerability listed in CISA KEV?

No. None of the known If-So Dynamic Content – Elementor & All Page Builders Personalization vulnerabilities is currently listed in the CISA KEV catalog.

if-so— active installsLast vulnerability Nov 7, 2026

No known unpatched vulnerabilities in the latest version

All 17 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

17Known vulnerabilities

Critical0
High1
Medium16
Low0

Vulnerabilities per year

All If-So Dynamic Content – Elementor & All Page Builders Personalization vulnerabilities

If-So Dynamic Content – Elementor & All Page Builders Personalization vulnerabilities
Severity	Vulnerability	CVE	Published
Medium6.1	Reflected Cross-Site Scripting ≤1.10.3Update to 1.10.4	CVE-2026-121782	Nov 07
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute ≤1.10.2Update to 1.10.3	CVE-2026-103996	Oct 27
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute ≤1.10.2Update to 1.10.3	CVE-2026-104740	Oct 27
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter ≤1.10.2Update to 1.10.3	CVE-2026-118164	Oct 27
Medium6.1	1.10.1 - Reflected Cross-Site Scripting 1.4.4 – 1.10.1Update to 1.10.2	CVE-2026-87971	Oct 05
High7.2	Unauthenticated Stored Cross-Site Scripting ≤1.10.1Update to 1.10.2	CVE-2026-100507	Sep 30
Medium6.1	1.10.1 - Reflected Cross-Site Scripting 1.8 – 1.10.1Update to 1.10.2	CVE-2026-87970	Sep 29
Medium4.4	1.10.1 - Authenticated (Editor+) Stored Cross-Site Scripting 1.9.9 – 1.10.1Update to 1.10.2	CVE-2026-87973	Sep 29
Medium6.5	Authenticated (Subscriber+) SQL Injection ≤1.10Update to 1.10.0.1	CVE-2026-66446	Aug 07
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.9.4Update to 1.9.4.1	CVE-2025-58602	Sep 3, 2025
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.9.3.1Update to 1.9.3.2	CVE-2025-49875	Jun 12, 2025
Medium4.3	Authenticated (Contributor+) Post Disclosure ≤1.9.2.1Update to 1.9.2.2	CVE-2024-10796	Nov 20, 2024
Medium6.1	Reflected Cross-Site Scripting ≤1.8.0.3Update to 1.8.0.4	CVE-2024-5713	Jun 22, 2024
Medium4.4	Authenticated (Admin+) Stored Cross-Site Scripting ≤1.8.0.3Update to 1.8.0.4	CVE-2024-6070	Jun 22, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.8.0.2Update to 1.8.0.3	CVE-2024-5440	May 10, 2024
Medium5.3	Missing Authorization ≤1.7.1Update to 1.7.1.1	CVE-2024-34820	May 9, 2024
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤1.6.3.1Update to 1.7	CVE-2023-51492	Dec 27, 2023

Medium6.1
Reflected Cross-Site Scripting
≤1.10.3Update to 1.10.4
CVE-2026-121782Nov 07
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via ifso-redirect Shortcode 'url' Attribute
≤1.10.2Update to 1.10.3
CVE-2026-103996Oct 27
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via 'conversion' Shortcode Attribute
≤1.10.2Update to 1.10.3
CVE-2026-104740Oct 27
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting via 'repeater' Parameter
≤1.10.2Update to 1.10.3
CVE-2026-118164Oct 27
Medium6.1
1.10.1 - Reflected Cross-Site Scripting
1.4.4 – 1.10.1Update to 1.10.2
CVE-2026-87971Oct 05
High7.2
Unauthenticated Stored Cross-Site Scripting
≤1.10.1Update to 1.10.2
CVE-2026-100507Sep 30
Medium6.1
1.10.1 - Reflected Cross-Site Scripting
1.8 – 1.10.1Update to 1.10.2
CVE-2026-87970Sep 29
Medium4.4
1.10.1 - Authenticated (Editor+) Stored Cross-Site Scripting
1.9.9 – 1.10.1Update to 1.10.2
CVE-2026-87973Sep 29
Medium6.5
Authenticated (Subscriber+) SQL Injection
≤1.10Update to 1.10.0.1
CVE-2026-66446Aug 07
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.9.4Update to 1.9.4.1
CVE-2025-58602Sep 3, 2025
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.9.3.1Update to 1.9.3.2
CVE-2025-49875Jun 12, 2025
Medium4.3
Authenticated (Contributor+) Post Disclosure
≤1.9.2.1Update to 1.9.2.2
CVE-2024-10796Nov 20, 2024
Medium6.1
Reflected Cross-Site Scripting
≤1.8.0.3Update to 1.8.0.4
CVE-2024-5713Jun 22, 2024
Medium4.4
Authenticated (Admin+) Stored Cross-Site Scripting
≤1.8.0.3Update to 1.8.0.4
CVE-2024-6070Jun 22, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.8.0.2Update to 1.8.0.3
CVE-2024-5440May 10, 2024
Medium5.3
Missing Authorization
≤1.7.1Update to 1.7.1.1
CVE-2024-34820May 9, 2024
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤1.6.3.1Update to 1.7
CVE-2023-51492Dec 27, 2023

If-So Dynamic Content – Elementor & All Page Builders Personalization: common questions

Does If-So Dynamic Content – Elementor & All Page Builders Personalization have known vulnerabilities?

Yes. VulnCrest Radar lists 17 known vulnerabilities in If-So Dynamic Content – Elementor & All Page Builders Personalization: 1 high, 16 medium. None are known to affect version null.

How do I check which version of If-So Dynamic Content – Elementor & All Page Builders Personalization I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent If-So Dynamic Content – Elementor & All Page Builders Personalization vulnerability?

CVE-2026-121782, published Nov 7, 2026: If-So Dynamic Content – Elementor & All Page Builders Personalization <= 1.10.3 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).

Is any If-So Dynamic Content – Elementor & All Page Builders Personalization vulnerability listed in CISA KEV?

No. None of the known If-So Dynamic Content – Elementor & All Page Builders Personalization vulnerabilities is currently listed in the CISA KEV catalog.