WordPress Search Atlas SEO Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)

Software Search Atlas SEO Type Plugin Vulnerable versions = 1.8.2 Fixed in 1.8.3 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-47387 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 5bed7811f9e2 Credits Robert DeVore Required privilege...

WordPress plugin Premium SEO Pack – WP SEO Plugin 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. WordPress plugin Premium S...

CVE-2024-3679: Exposure of Sensitive Information to an Unauthorized Actor

The Premium SEO Pack – WP SEO Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.002. This makes it possible for unauthenticated attackers to view limited information from password protected posts through the social meta data...

CVE-2024-43286

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

CVE-2024-43286

CVE-2024-43286 describes an SQL injection risk in the WordPress plugin Squirrly SEO (WordPress SEO Plugin by Squirrly SEO) up to version 12.3.19 . The vulnerability arises from improper neutralization of specific elements used in SQL commands, allowing an attacker to potentially affect confidenti...

CVE-2024-43286 WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

CVE-2024-43286: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.19...

PT-2024-30451

Name of the Vulnerable Software and Affected Versions Squirrly SEO Plugin versions n/a through 12.3.19 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for potential exploitation by injecting...

WordPress Squirrly SEO plugin <= 12.3.19 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin SEO Plugin by Squirrly SEO versions = 12.3.19...

WordPress SEO Plugin by Squirrly SEO Plugin <= 12.3.19 is vulnerable to SQL Injection

Software SEO Plugin by Squirrly SEO Type Plugin Vulnerable versions = 12.3.19 Fixed in 12.3.20 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-43286 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID a803fc913cd9 Credits Rafie Muhammad Patchstack Required...

EUVD-2024-47582

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-6497

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-6497

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

PT-2024-37671 · Squirrly · Squirrly Seo Plugin

Name of the Vulnerable Software and Affected Versions: The SEO Plugin by Squirrly SEO plugin for WordPress versions up to and including 12.3.19 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping, allowing authenticated...

CVE-2024-6497: Improper Neutralization of Special Elements used in an SQL Command

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 12.3.19 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

CVE-2024-6556

The SmartCrawl WordPress SEO checker, SEO analyzer, SEO optimizer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 3.10.8. This is due the plugin utilizing mobiledetect without preventing direct access to the files. This makes it possible for...

The vulnerability of the WP Meta SEO plugin, a content management system for WordPress, allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the WP Meta SEO plugin for WordPress content management system exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

WordPress Praison SEO WordPress plugin <= 4.0.15 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by CatFather in WordPress Plugin Praison SEO WordPress versions = 4.0.15...

WordPress Yoast SEO plugin <= 22.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by rob006 in WordPress Plugin Yoast SEO versions = 22.6...

WordPress plugin Yoast SEO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...