Yoast SEO Plugin for WordPress 1.6.x < 1.6.4 Multiple Vulnerabilities

The WordPress Yoast SEO Plugin installed on the remote host is affected by multiple Cross-Site Request Forgery and multiple SQL Injection. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

Yoast SEO Plugin for WordPress 1.7.x < 1.7.4 Multiple Vulnerabilities

The WordPress Yoast SEO Plugin installed on the remote host is affected by multiple Cross-Site Request Forgery and multiple SQL Injection. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No source data...

sandiegoseofirm.net Cross Site Scripting vulnerability OBB-3115720

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Adult popunder campaign used in mainstream ad fraud scheme

This blog post was authored by Jerome Segura Online advertising is a multi billion dollar industry with projected spending to reach over 600 billion U.S. dollars for 2022. It's not surprising that criminals are trying their hardest to abuse this ecosystem in any way that they can. One of the...

Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages

NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published by unknown threat actors. "The packages were part of a new attack vector, with attackers spamming the open source ecosystem with packages containing links to phishing...

Qe SEO Handyman <= 1.0 - Admin+ SQLi

The plugin does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin PoC POST /wp-admin/admin-ajax.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:91.0 Gecko/20100101...

Qe SEO Handyman <= 1.0 - Admin+ SQLi

The plugin does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin PoC POST /wp-admin/admin-post.php HTTP/1.1 Host: localhost User-Agent: Mozilla/5.0 X11; Linux x8664; rv:91.0 Gecko/20100101...

CVE-2022-38140

Auth. contributor+ Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin = 12.1.10 on WordPress...

CVE-2022-38140

Auth. contributor+ Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin = 12.1.10 on WordPress...

Design/Logic Flaw

Auth. contributor+ Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin = 12.1.10 on WordPress...

CVE-2022-38140 WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.10 is vulnerable to Arbitrary File Upload

Auth. contributor+ Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin = 12.1.10 on WordPress...

CVE-2022-38140

Summary of CVE-2022-38140 : The WordPress SEO Plugin by Squirrly SEO (versions ≤ 12.1.10) is vulnerable to an Arbitrary File Upload issue exploitable by users with a contributor role or higher. The root cause described across sources is inadequate validation/handling of uploaded files, allowing u...

SEO Plugin by Squirrly SEO < 12.1.11 - Contributor+ Arbitrary File Upload

The plugin does not validate files to be uploaded, which could allow users with a role as low as contributor to upload arbitrary files such as PHP...

WordPress plugin Squirrly SEO 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

PT-2022-24233 · Squirrly · Squirrly Seo Plugin

Name of the Vulnerable Software and Affected Versions: SEO Plugin by Squirrly SEO plugin versions 12.1.10 and earlier Description: The issue concerns an arbitrary file upload vulnerability in the SEO Plugin by Squirrly SEO plugin, affecting WordPress. This vulnerability can be exploited by...

Microsoft Warns of Hackers Using Google Ads to Distribute Royal Ransomware

A developing threat activity cluster has been found using Google Ads in one of its campaigns to distribute various post-compromise payloads, including the recently discovered Royal ransomware. Microsoft, which spotted the updated malware delivery method in late October 2022, is tracking the group...

CVE-2022-40695

Multiple Cross-Site Scripting CSRF vulnerabilities in SEO Redirection Plugin plugin = 8.9 on WordPress...

CVE-2022-40695

Multiple Cross-Site Scripting CSRF vulnerabilities in SEO Redirection Plugin plugin = 8.9 on WordPress...

Cross site scripting

Multiple Cross-Site Scripting CSRF vulnerabilities in SEO Redirection Plugin plugin = 8.9 on WordPress...

CVE-2022-40695 WordPress SEO Redirection Plugin plugin <= 8.9 - Multiple Cross-Site Scripting (CSRF) vulnerabilities

Multiple Cross-Site Scripting CSRF vulnerabilities in SEO Redirection Plugin plugin = 8.9 on WordPress...