3155 matches found
PT-2024-20901 · WordPress · Rank Math Seo
Name of the Vulnerable Software and Affected Versions: Rank Math SEO with AI SEO Tools plugin for WordPress versions up to, and including, 1.0.214 Description: The issue is related to Stored Cross-Site Scripting via the HowTo block attributes due to insufficient input sanitization and output...
CVE-2022-44626
Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...
CVE-2022-44626
Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...
CVE-2022-44626
CVE-2022-44626 corresponds to a missing/weak authorization (Broken Access Control) vulnerability in the WordPress plugin SEO Plugin by Squirrly SEO up to version 12.1.20 . The issue allows unauthorized access due to insufficient authorization checks in the plugin’s AJAX actions, affecting the plu...
CVE-2022-44626 WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...
CVE-2022-44626 WordPress Squirrly SEO (Peaks) plugin <= 12.1.20 - Broken Access Control vulnerability
Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...
WordPress SEO Plugin by Squirrly SEO Plugin <= 12.3.16 is vulnerable to Cross Site Scripting (XSS)
Software SEO Plugin by Squirrly SEO Type Plugin Vulnerable versions = 12.3.16 Fixed in 12.3.17 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29790 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 6fd9bc558ae6 Credits Rafie Muhammad...
WordPress SEO Backlink Monitor Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)
Software SEO Backlink Monitor Type Plugin Vulnerable versions = 1.5.0 Fixed in 1.6.0 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-29907 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 62c1627bf899 Credits Dimas Maulana Required...
WordPress Plugin SEO Plugin by Squirrly SEO 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin SEO Plugin by Squirrly SEO...
Rank Math SEO with AI SEO Tools < 1.0.215 - Contributor+ Stored XSS
Description The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it...
WordPress Rank Math SEO Plugin <= 1.0.214 is vulnerable to Cross Site Scripting (XSS)
Software Rank Math SEO Type Plugin Vulnerable versions = 1.0.214 Fixed in 1.0.215 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2536 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID f1189e63f4f4 Credits Ngô Thiên An ancorn...
seo-obmen.ru Open Redirect vulnerability OBB-3876697
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-25848
In the module "Ever Ultimate SEO" everpsseo = 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions...
Sql injection
In the module "Ever Ultimate SEO" everpsseo = 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions...
PrestaShop Security Breach
PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution offers multiple payment methods, short message alerts and product image scaling. A security vulnerability exists in PrestaShop Ever Ultimate SEO 8.1.2 and prior versions that stems from the presence of SQL...
CVE-2024-25848
In the module "Ever Ultimate SEO" everpsseo = 8.1.2 from Team Ever for PrestaShop, a guest can perform SQL injection in affected versions...
CVE-2024-25848
CVE-2024-25848 concerns the Ever Ultimate SEO (everpsseo) module for PrestaShop. Affected versions are 8.1.2 and earlier. The Red Hat/NVD/NVD-enriched data and related sources confirm a guest can perform an SQL injection in these versions due to the vulnerable module, i.e., the vulnerability invo...
PT-2024-21160 · Unknown · Ever Ultimate Seo
Name of the Vulnerable Software and Affected Versions: Ever Ultimate SEO everpsseo versions 8.1.2 and earlier Description: A SQL injection issue exists, allowing a guest to perform malicious actions in affected versions. Recommendations: For versions 8.1.2 and earlier, update to a version later...