CVE-2024-49627

Cross-Site Request Forgery CSRF vulnerability in Noor Alam WordPress Image SEO allows Cross Site Request Forgery.This issue affects WordPress Image SEO: from n/a through 1.1.4...

CVE-2024-49627 WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Noor Alam WordPress Image SEO allows Cross Site Request Forgery.This issue affects WordPress Image SEO: from n/a through 1.1.4...

CVE-2024-49627 WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Noor Alam WordPress Image SEO allows Cross Site Request Forgery.This issue affects WordPress Image SEO: from n/a through 1.1.4...

CVE-2024-49627

CVE-2024-49627 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Image SEO plugin by Noor Alam, affecting versions 1.1.4 and earlier. Public documents consistently identify the affected software as WordPress Image SEO and the vulnerability type as CSRF, with the impact ...

WordPress plugin WordPress Image SEO 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress plugin WordPress...

PT-2024-33582 · WordPress · Noor Alam Wordpress Image Seo

Name of the Vulnerable Software and Affected Versions: Noor Alam WordPress Image SEO versions 1.1.4 and earlier Description: A Cross-Site Request Forgery CSRF issue affects Noor Alam WordPress Image SEO, allowing attackers to perform unauthorized actions. This can be exploited by misusing...

WordPress WordPress Image SEO plugin <= 1.1.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WordPress Image SEO versions = 1.1.4...

WordPress WordPress Image SEO Plugin <= 1.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software WordPress Image SEO Type Plugin Vulnerable versions = 1.1.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-49627 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4ac99c737309 Credits SOPROBRO Required...

CVE-2024-9521

CVE-2024-9521 affects the WordPress SEO Manager plugin (versions

CVE-2024-9521 SEO Manager <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

The SEO Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.9 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level a...

WordPress SEO Manager plugin <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Post Meta vulnerability discovered by István Márton in WordPress Plugin SEO Manager versions = 1.9...

WordPress plugin SEO Manager 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

WordPress SEO Manager Plugin <= 1.9 is vulnerable to Cross Site Scripting (XSS)

Software SEO Manager Type Plugin Vulnerable versions = 1.9 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9521 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 00863c67821a Credits István Márton Required privilege...

CVE-2024-9066

The Marketing and SEO Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level acces...

CVE-2024-9066 Marketing and SEO Booster <= 1.9.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

The Marketing and SEO Booster plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.9.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level acces...

WordPress plugin Marketing and SEO Booster 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

WordPress Marketing and SEO Booster plugin <= 1.9.10 - Authenticated (Author+) Stored Cross-Site Scripting vulnerability

Authenticated Author+ Stored Cross-Site Scripting vulnerability discovered by Francesco Carlucci in WordPress Plugin Marketing and SEO Booster versions = 1.9.10...

WordPress Marketing and SEO Booster Plugin <= 1.9.10 is vulnerable to Cross Site Scripting (XSS)

Software Marketing and SEO Booster Type Plugin Vulnerable versions = 1.9.10 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-9066 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 87cf43408d05 Credits Francesco...

WordPress Rank Math SEO plugin <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete vulnerability

Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete vulnerability discovered by Leo in WordPress Plugin Rank Math SEO versions = 1.0.228...

WordPress Rank Math SEO plugin <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection vulnerability

Authenticated Administrator+ PHP Object Injection vulnerability discovered by Leo in WordPress Plugin Rank Math SEO versions = 1.0.228...