334 matches found
CVE-2023-34375
CVE-2023-34375 concerns the WordPress plugin “SEO by 10Web” (versions ≤ 1.2.9). The vulnerability is an unauthenticated reflected Cross‑Site Scripting (XSS) that could be exploited by an attacker without credentials. Public writeups in the connected data confirm the flaw exists in this plugin ver...
CVE-2023-46618
Cross-Site Request Forgery CSRF vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
The vulnerability of the SEO plugin developed by 10Web, a content management system for WordPress, allows attackers to perform cross-site scripting attacks.
The vulnerability of the SEO plugin of the 10Web content management system for WordPress is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...
Cross site scripting
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin = 2.5 versions...
CVE-2023-45269
Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 2.0.25 versions...
CVE-2023-45269
CVE-2023-45269 - CSRF in WordPress Simple SEO plugin (
Wordpress Plugin Simple SEO Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2023-29475 · Unknown · David Cole Simple Seo
Name of the Vulnerable Software and Affected Versions: David Cole Simple SEO plugin versions prior to 2.0.25 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...
CVE-2023-32600
Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in Rank Math SEO plugin = 1.0.119 versions...
CVE-2023-32600
CVE-2023-32600 is a stored XSS vulnerability in WordPress Rank Math SEO plugin versions <= 1.0.119. The vulnerability affects the plugin’s handling of input in a way that could allow an attacker with Contributor-level privileges and user interaction to induce script execution (per CVSS vector:...
WordPress WordPress Auto SEO Plugin – Upfiv SEO Wizard Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
Software WordPress Auto SEO Plugin – Upfiv SEO Wizard Type Plugin Vulnerable versions = 1.0.3 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 2a56c1fca648 Credits Rafie...
CVE-2023-2029
The PrePost SEO WordPress plugin through 3.0 does not properly sanitize some of its settings, which could allow high-privilege users to perform Stored Cross-Site Scripting XSS attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2019-25146
The DELUCKS SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saveSettings function that had no capability checks in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
Cross site scripting
The DELUCKS SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saveSettings function that had no capability checks in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
CVE-2019-25146 DELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
The DELUCKS SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the saveSettings function that had no capability checks in versions up to, and including, 2.1.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to...
WordPress Plugin DELUCKS SEO 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...
CVE-2023-2224
The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2022-45065
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...