WordPress plugin Yoast SEO 信息泄露漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports the hosting of personal blogging sites on servers with PHP and MySQL. An information disclosure vulnerability exists in versions of the WordPress Yoast SEO plugin prior to...

WordPress SEO Audit Plugin – WP Site Auditor plugin <= 1.2.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SEO Audit Plugin – WP Site Auditor plugin versions = 1.2.4. Solution Update the WordPress SEO Audit Plugin – WP Site Auditor plugin to the latest available version at least 1.2.5...

WordPress Local SEO For Divi & Gutenberg Blocks plugin <= 9.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Local SEO For Divi & Gutenberg Blocks plugin versions = 9.1.2. Solution Update the WordPress Local SEO For Divi & Gutenberg Blocks plugin to the latest available version at least 9.1.3...

WordPress Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster plugin versions = 1.0.6. Solution No patched version available...

WordPress BAVOKO SEO Tools – All-in-One WordPress SEO plugin <= 2.1.9.12 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress BAVOKO SEO Tools – All-in-One WordPress SEO plugin versions = 2.1.9.12. Solution No patched version available...

WordPress WooCommerce SEO Content Randomizer Addon plugin <= 1.2.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WooCommerce SEO Content Randomizer Addon plugin versions = 1.2.0. Solution Update the WordPress WooCommerce SEO Content Randomizer Addon plugin to the latest available version at least 1.2.2...

WordPress SEO Plugin by Squirrly SEO plugin <= 11.1.11 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by Krzysztof Zając in WordPress SEO Plugin by Squirrly SEO plugin versions = 11.1.11. Solution Update the WordPress SEO Plugin by Squirrly SEO plugin to the latest available version at least 11.1.12...

WordPress Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Bulk SEO Noindex Nofollow – Speed up Penalty Recovery Ultimate SEO Booster plugin versions = 1.0.6. Solution No patched version available...

WordPress SEO Landing Page Generator plugin <= 1.61.0 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SEO Landing Page Generator plugin versions = 1.61.0. Solution Update the WordPress SEO Landing Page Generator plugin to the latest available version at least 1.62.0...

WordPress Auto SEO META keywords (META tags keywords) optimization + WooCommerce plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Auto SEO META keywords META tags keywords optimization + WooCommerce plugin versions = 1.0.3. Solution Update the WordPress Auto SEO META keywords META tags keywords optimization + WooCommerce Test...

WordPress Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin <= 1.0.3 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Internal Linking for SEO traffic & Ranking – Auto internal links 100% automatic plugin versions = 1.0.3. Solution Update the WordPress Internal Linking for SEO traffic & Ranking – Auto internal links...

WordPress WordPress SEO Checklist plugin <= 1.0.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress SEO Checklist plugin versions = 1.0.2. Solution No patched version available...

WordPress VidSEO | WordPress Video SEO embedder with transcripts (Youtube & Vimeo) plugin <= 1.2.3.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress VidSEO | WordPress Video SEO embedder with transcripts Youtube & Vimeo plugin versions = 1.2.3.2. Solution Update the WordPress VidSEO | WordPress Video SEO embedder with transcripts Youtube & Vimeo plugin to the latest...

WordPress BAVOKO SEO Tools – All-in-One WordPress SEO plugin <= 2.1.9.12 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress BAVOKO SEO Tools – All-in-One WordPress SEO plugin versions = 2.1.9.12. Solution No patched version available...

WordPress WooCommerce SEO Content Randomizer Addon plugin <= 1.2.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WooCommerce SEO Content Randomizer Addon plugin versions = 1.2.0. Solution Update the WordPress WooCommerce SEO Content Randomizer Addon plugin to the latest available version at least 1.2.2...

WordPress SEO Booster plugin < 3.8.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress SEO Booster plugin versions 3.8.5. Solution Update the WordPress SEO Booster plugin to the latest available version at least 3.8.5...

Social Media Hijacking Malware Spreading Through Gaming Apps on Microsoft Store

A new malware capable of controlling social media accounts is being distributed through Microsoft's official app store in the form of trojanized gaming apps, infecting more than 5,000 Windows machines in Sweden, Bulgaria, Russia, Bermuda, and Spain. Israeli cybersecurity company Check Point dubbe...

Cross-site Scripting (XSS) - Stored

Description pimcore is vulnerable to Stored XSS at Title field in the SEO & Settings tab of a Document page. Payload " Step to reproduce 1.Go to https://demo.pimcore.fun/admin/ and login. 2.Click on any document Home, de,... in the Documents 3.Go to SEO & Settings tab, in the Title field, input...

WordPress Yoast SEO <= 17.2.1 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by Fariq Fadillah Gusti Insani in WordPress Yoast SEO versions = 17.2.1. Solution Update the WordPress Yoast SEO to the latest available version at least 17.3...

SEO 301 Meta <= 1.9.1 - Admin+ Stored Cross-Site Scripting

The plugin does not escape its Request and Destination settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed Put the following payload in the Request or Destination settings of the plugin: "...