3766 matches found
WordPress gregs-high-performance-seo plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gregs-high-performance-seo is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...
CVE-2016-10896
The seo-redirection plugin before 4.3 for WordPress has stored XSS...
Cross site scripting
The seo-redirection plugin before 4.3 for WordPress has stored XSS...
CVE-2016-10896
The CVE-2016-10896 entry concerns the WordPress plugin seo-redirection (pre-4.3) and describes a stored cross-site scripting (XSS) vulnerability. The vulnerability is tied to the seo-redirection plugin prior to version 4.3, with the impact resulting in stored XSS as stated in multiple linked sour...
CVE-2016-10896
The seo-redirection plugin before 4.3 for WordPress has stored XSS...
CVE-2016-10896: Improper Neutralization of Input During Web Page Generation
The seo-redirection plugin before 4.3 for WordPress has stored XSS...
CVE-2015-9319
The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser...
CVE-2015-9319
CVE-2015-9319 concerns the WordPress plug‑in Gregs High Performance SEO (before 1.6.2) with a cross-site scripting (XSS) vulnerability in the context of an old browser. Multiple sources (NVD and vendor/security bulletins) corroborate that the flaw affects this plugin and is XSS‑related; exploitat...
CVE-2015-9319: Improper Neutralization of Input During Web Page Generation
The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser...
WordPress Rank Math SEO Plugin Code Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.Rank Math SEO is a search engine optimization SEO plugin used in... A code injection vulnerability exists in the...
CVE-2019-14786
The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter...
Code injection
The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter...
CVE-2019-14786
CVE-2019-14786 affects WordPress Rank Math SEO plugin (version 1.0.27). The vulnerability allows any authenticated user (non-admin) to reset plugin settings via wp-admin/admin-post.php?reset-cmb parameter. The issue is documented across multiple sources (NVD, Red Hat, OpenVAS, WPVulnDB) and relat...
CVE-2019-14786: Missing Authorization
The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter...
PT-2019-13831 · WordPress · Rank Math Seo
Name of the Vulnerable Software and Affected Versions: Rank Math SEO plugin version 1.0.27 Description: The issue allows non-admin users to reset settings. This is achieved via the wp-admin/admin-post.php endpoint, specifically through the reset-cmb parameter. Recommendations: For Rank Math SEO...
WordPress Yoast SEO plugin 1.2.0-11.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability found by Sybre Waaijer in WordPress Yoast SEO plugin versions 1.2.0-11.5. Solution Update the WordPress Yoast SEO plugin to the latest available version at least 11.6...
CVE-2019-13478
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...
CVE-2019-13478
The Yoast SEO plugin before 11.6-RC5 for WordPress does not properly restrict unfiltered HTML in term descriptions...