PT-2024-33699 · Yoast · Yoast Seo

Name of the Vulnerable Software and Affected Versions: Yoast SEO plugin for WordPress versions up to, and including, 22.6 Description: The issue is related to Stored Cross-Site Scripting via the display name author meta due to insufficient input sanitization and output escaping. This allows...

PT-2024-28834

Name of the Vulnerable Software and Affected Versions Yoast SEO plugin for WordPress versions up to and including 22.5 Description The issue is related to Reflected Cross-Site Scripting via URLs due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to...

CVE-2023-6962

CVE-2023-6962 affects the WP Meta SEO WordPress plugin, with a Sensitive Information Exposure vulnerability present in all versions up to and including 4.5.12, allowing unauthenticated attackers to disclose sensitive data via the meta description of password-protected posts. The linked records co...

PT-2024-15144

Name of the Vulnerable Software and Affected Versions WP Meta SEO plugin for WordPress versions up to, and including, 4.5.12 Description The issue allows unauthenticated attackers to disclose potentially sensitive information via the meta description of password-protected posts. This is possible...

CVE-2024-3554: Improper Neutralization of Input During Web Page Generation

The All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 4.6.0 due to insufficient input sanitization and output escaping on...

WordPress Platinum SEO plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin Platinum SEO versions = 2.4.0...

WordPress DELUCKS SEO plugin <= 2.5.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Mika Patchstack Alliance in WordPress Plugin DELUCKS SEO versions = 2.5.4...

CVE-2024-29790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16...

CVE-2024-29790

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16...

CVE-2024-29790 WordPress Squirrly SEO plugin <= 12.3.16 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16...

CVE-2024-29790

CVE-2024-29790 — Reflected Cross-Site Scripting in the WordPress plugin Squirrly SEO Plugin by Squirrly SEO. Affects plugin versions up to 12.3.16 (inclusive). Root cause: improper neutralization of input during web page generation. Exploit details and remediation are not provided in the availabl...

PT-2024-23034 · WordPress · Squirrly Seo Plugin

Name of the Vulnerable Software and Affected Versions: Squirrly SEO Plugin versions through 12.3.16 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, allowing Reflected XSS. Recommendations: For versions through...

CVE-2024-29790: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Squirrly SEO Plugin by Squirrly SEO allows Reflected XSS.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.3.16...

CVE-2022-44626

Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...

CVE-2022-44626

Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...

WordPress SEO Plugin by Squirrly SEO Plugin <= 12.3.16 is vulnerable to Cross Site Scripting (XSS)

Software SEO Plugin by Squirrly SEO Type Plugin Vulnerable versions = 12.3.16 Fixed in 12.3.17 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29790 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6fd9bc558ae6 Credits Rafie Muhammad...

CVE-2022-44626: Missing Authorization

Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...

CVE-2024-0597

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 12.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

CVE-2024-0597 SEO Plugin by Squirrly SEO <= 12.3.15 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings

The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 12.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level...

PT-2024-15678

Name of the Vulnerable Software and Affected Versions The SEO Plugin by Squirrly SEO plugin for WordPress versions up to and including 12.3.15 Description The issue is related to Stored Cross-Site Scripting via admin settings due to insufficient input sanitization and output escaping. This allows...