PT-2025-39585

Name of the Vulnerable Software and Affected Versions DaganLev Simple Meta Tags versions through 1.5 Description The software contains a flaw related to improper input handling during web page generation, specifically a DOM-Based Cross-site Scripting issue. This allows for potential execution of...

gezi-core (>=0.0.0 <=0.0.2), less-common-words (=0.0.0) +1 more potentially affected by unknown CVE via most-common-words (=2.0.0)

most-common-words NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on most-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - less-common-words =0.0.0 - meta-tags =0.0.0 Source cves: unknown CVE Source advisory:...

gezi-core (>=0.0.0 <=0.0.2), meta-tags (=0.0.0) potentially affected by unknown CVE via less-common-words (=0.0.0)

less-common-words NPM version =0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on less-common-words and may be impacted: - gezi-core =0.0.0, =0.0.2 - meta-tags =0.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-25174...

CVE-2023-46091

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

CVE-2023-46618

Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...

CVE-2012-5654

The Nodewords: D6 Meta Tags module before 6.x-1.14 for Drupal, when configured to automatically generate description meta tags from node text, does not properly filter node content when creating tags, which might allow remote attackers to obtain sensitive information by reading the 1 description,...

CVE-2014-9363

Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter...

CVE-2014-9362

Cross-site scripting XSS vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users with the "Edit path based meta tags" permission to inject arbitrary web script or HTML via vectors related to deleting a...

CVE-2025-31023

Cross-Site Request Forgery CSRF vulnerability in Purab Seo Meta Tags seo-meta-tags allows Cross Site Request Forgery.This issue affects Seo Meta Tags: from n/a through = 1.4...

WordPress Seo Meta Tags plugin <= 1.4 - CSRF to Privilege Escalation vulnerability

CSRF to Privilege Escalation vulnerability discovered by LVT-tholv2k in WordPress Plugin Seo Meta Tags versions = 1.4...

CVE-2025-31023

Cross-Site Request Forgery CSRF vulnerability in Purab Seo Meta Tags seo-meta-tags allows Cross Site Request Forgery.This issue affects Seo Meta Tags: from n/a through = 1.4...

CVE-2025-31023 WordPress Seo Meta Tags plugin <= 1.4 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Purab Seo Meta Tags seo-meta-tags allows Cross Site Request Forgery.This issue affects Seo Meta Tags: from n/a through = 1.4...

CVE-2025-31023 WordPress Seo Meta Tags plugin <= 1.4 - CSRF to Privilege Escalation vulnerability

Cross-Site Request Forgery CSRF vulnerability in Purab Seo Meta Tags seo-meta-tags allows Cross Site Request Forgery.This issue affects Seo Meta Tags: from n/a through = 1.4...

WordPress plugin Seo Meta Tags 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...

CVE-2024-35234

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch and version 3.3.0.beta3 on the tests-passed branch, an attacker can execute arbitrary JavaScript on users’ browsers by posting a specific URL containing maliciously crafted meta tags. This issue only...

CVE-2024-35234 Discourse vulnerable to stored-dom XSS via Facebook Oneboxes

Discourse is an open-source discussion platform. Prior to version 3.2.3 on the stable branch and version 3.3.0.beta3 on the tests-passed branch, an attacker can execute arbitrary JavaScript on users’ browsers by posting a specific URL containing maliciously crafted meta tags. This issue only...

CVE-2024-2093

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 via social meta tags. This makes it possible for unauthenticated attackers to view limited password protected content...

CVE-2024-2093 VK All in One Expansion Unit <= 9.95.0.1 - Information Exposure

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 via social meta tags. This makes it possible for unauthenticated attackers to view limited password protected content...

CVE-2024-2093

The VK All in One Expansion Unit plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 9.95.0.1 via social meta tags. This makes it possible for unauthenticated attackers to view limited password protected content...

PT-2024-18818 · WordPress · Vk All In One Expansion Unit

Name of the Vulnerable Software and Affected Versions: VK All in One Expansion Unit plugin for WordPress versions up to, and including, 9.95.0.1 Description: The issue allows unauthenticated attackers to view limited password-protected content due to Sensitive Information Exposure via social meta...