3163 matches found
CVE-2024-51719
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roman Peterhans Simplistic SEO simplistic-seo allows Reflected XSS.This issue affects Simplistic SEO: from n/a through = 2.3.0...
CVE-2024-51719
CVE-2024-51719 is a Reflected Cross-Site Scripting vulnerability affecting the WordPress plugin Simplistic SEO . The description notes improper input neutralization during web page generation, enabling Reflected XSS for versions from 0 through 2.3.0 (i.e., affected range up to 2.3.0). The attache...
CVE-2024-51719 WordPress Simplistic SEO plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Roman Peterhans Simplistic SEO simplistic-seo allows Reflected XSS.This issue affects Simplistic SEO: from n/a through = 2.3.0...
WordPress plugin Simplistic SEO 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site scripting...
PT-2024-34865 · Unknown · Simplistic Seo
Name of the Vulnerable Software and Affected Versions: Simplistic SEO versions prior to 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Reflected XSS attacks. Recommendations: For...
WordPress Simplistic SEO plugin <= 2.3.0 - Reflected Cross Site Scripting (XSS) vulnerability
Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro Soares de Alcântara - Kinorth Patchstack Alliance in WordPress Plugin Simplistic SEO versions = 2.3.0...
WordPress Simplistic SEO Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
Software Simplistic SEO Type Plugin Vulnerable versions = 2.3.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51719 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fcffa486be1c Credits João Pedro S Alcântara Kinorth...
WordPress W3P SEO plugin < 1.8.6 - CSRF to Stored XSS vulnerability
CSRF to Stored XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin W3P SEO versions 1.8.6...
WordPress W3P SEO Plugin < 1.8.6 is vulnerable to Cross Site Request Forgery (CSRF)
Software W3P SEO Type Plugin Vulnerable versions 1.8.6 Fixed in 1.8.6 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51684 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 58f497ee049b Credits SOPROBRO Required privilege...
WordPress Seo Free Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Seo Free Type Plugin Vulnerable versions = 1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-51642 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 3ad2526b4888 Credits SOPROBRO Required privilege...
CVE-2024-50465
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 1.6.001...
CVE-2024-50465
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 1.6.001...
CVE-2024-50465 WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 1.6.001...
CVE-2024-50465
CVE-2024-50465 affects WordPress Premium SEO Pack (WP SEO) plugin versions <= 1.6.001. The vulnerability is an SQL Injection due to improper neutralization of special elements in SQL commands. Patchstack and CVE entries indicate the fix is in version 1.6.002. Exploitation details are not provi...
CVE-2024-50465 WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in WP SEO – Calin Vingan Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 1.6.001...
WordPress plugin Premium SEO Pack SQL注入漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...
PT-2024-34241 · Unknown · Wp Seo – Calin Vingan Premium Seo Pack
Name of the Vulnerable Software and Affected Versions: WP SEO – Calin Vingan Premium SEO Pack versions 1.6.001 and earlier Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection...
WordPress Premium SEO Pack plugin <= 1.6.001 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Hakiduck Patchstack Alliance in WordPress Plugin Premium SEO Pack versions = 1.6.001...
WordPress Premium SEO Pack Plugin <= 1.6.001 is vulnerable to SQL Injection
Software Premium SEO Pack Type Plugin Vulnerable versions = 1.6.001 Fixed in 1.6.002 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-50465 Patch priority Low CVSS severity Low 8.5 Developer Claim ownership PSID 56b65671a73e Credits Hakiduck Required privilege Contributor...