Lucene search
+L

43 matches found

NVD
NVD
added 5 days ago10 views

CVE-2026-15458

The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sortfield' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

4.9CVSS0.00272EPSS
Exploits0References5
NVD
NVD
added 5 days ago8 views

CVE-2026-15445

The SEO Booster plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

4.9CVSS0.00272EPSS
Exploits0References5
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-44867

The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sortfield' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

4.9CVSS6.1AI score0.00272EPSS
Exploits0References5
CVE
CVE
added 5 days ago12 views

CVE-2026-15458

CVE-2026-15458 affects the WordPress SEO Booster plugin up to version 7.3.1. The vulnerability is a SQL Injection in the sort_field parameter caused by insufficient escaping and an inadequately prepared SQL query. It requires authenticated access at Administrator level or higher, and could allow ...

4.9CVSS6.1AI score0.00272EPSS
Exploits0References5
Cvelist
Cvelist
added 5 days ago40 views

CVE-2026-15458 SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'sort_field' Parameter

The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sortfield' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible fo...

4.9CVSS0.00272EPSS
Exploits0References5
Cvelist
Cvelist
added 5 days ago42 views

CVE-2026-15445 SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter

The SEO Booster plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

4.9CVSS0.00272EPSS
Exploits0References5
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-44864

The SEO Booster plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible f...

4.9CVSS6.1AI score0.00272EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.11 views

CVE-2025-68019

Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Booster: from n/a through = 6.1.8...

6.5CVSS5.4AI score0.00354EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.4 views

CVE-2025-68019

Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Booster: from n/a through = 6.1.8...

6.5CVSS0.00354EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.2 views

CVE-2025-68019

Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Booster: from n/a through = 6.1.8...

6.5CVSS5.3AI score0.00354EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.22 views

CVE-2025-68019 WordPress SEO Booster plugin <= 6.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Booster: from n/a through = 6.1.8...

6.5CVSS0.00354EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.3 views

CVE-2025-68019 WordPress SEO Booster plugin <= 6.1.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Booster: from n/a through = 6.1.8...

5.9AI score0.00354EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/22 12:0 a.m.9 views

WordPress plugin SEO Booster has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.00354EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.9 views

PT-2026-4062

Name of the Vulnerable Software and Affected Versions cleverplugins SEO Booster versions through 6.1.8 Description An issue exists in SEO Booster related to incorrectly configured access control security levels, allowing for missing authorization. The vulnerability allows exploitation of these...

5.3AI score0.00354EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/19 12:50 p.m.9 views

WordPress SEO Booster plugin <= 6.1.8 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin SEO Booster versions = 6.1.8...

6.5CVSS5.4AI score0.00354EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.11 views

EUVD-2024-30256

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00241EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 10:13 a.m.14 views

CVE-2024-32438

Cross-Site Request Forgery CSRF vulnerability in cleverplugins.Com SEO Booster.This issue affects SEO Booster: from n/a through 3.8.9...

8.8CVSS5.1AI score0.00241EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/26 3:30 p.m.15 views

CVE-2025-27348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel WP Social SEO Booster – Knowledge Graph Social Signals SEO wp-social-seo-booster allows Stored XSS.This issue affects WP Social SEO Booster – Knowledge Graph Social Signals SEO: from n/a...

6.5CVSS7.2AI score0.00204EPSS
Exploits0References1
NVD
NVD
added 2025/02/24 3:15 p.m.8 views

CVE-2025-27348

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Daniel WP Social SEO Booster – Knowledge Graph Social Signals SEO wp-social-seo-booster allows Stored XSS.This issue affects WP Social SEO Booster – Knowledge Graph Social Signals SEO: from n/a...

6.5CVSS0.00204EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/02/24 3:13 p.m.7 views

WordPress WP Social SEO Booster plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin WP Social SEO Booster – Knowledge Graph Social Signals SEO versions = 1.2.0...

6.5CVSS6.1AI score0.00204EPSS
Exploits0Affected Software1
Rows per page
Query Builder