WordPress All in One SEO Pack Plugin <= 2.3.7 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Upgrade this plugin...

WordPress All in One SEO Pack Plugin <= 2.3.6.1 - Stored Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress All In One SEO Pack Plugin Cross-site Scripting

A cross-site scripting vulnerability exists in WordPress All In One SEO Pack plugin. Successful exploitation of this vulnerability would allow a remote attacker to insert malicious code into the effected system...

seo.dnnyweb.ru Open Redirect vulnerability

Open Bug Bounty ID: OBB-165759 Description| Value ---|--- Affected Website:| seo.dnnyweb.ru Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

WordPress All in One SEO Pack Plugin 2.3.6.1 - Persistent XSS

Because of this vulnerability, an attacker can steal administrators session token or perform other arbitrary actions. Solution Update the WordPress plugin to the newer stable and safe version...

WordPress All In One SEO Pack 2.3.6.1 Cross Site Scripting

------------------------------------------------------------------------ Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin ------------------------------------------------------------------------ David Vaartjes, July 2016...

WordPress All in One SEO Pack 2.3.6.1 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million activ...

All in One SEO Pack <= 2.3.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

Requires 'Track Blocked Bots setting' to be enabled which it is not by default...

Wordpress Premium SEO Pack 1.9.1.3 Plugin - wp_options Overwrite

Exploit for php platform in category web applications Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Ti...

WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite

Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Time line: Found 05-Jun-2016, Vendor notified 05-Jun-201...

WordPress Plugin Premium SEO Pack 1.9.1.3 - wp_options Overwrite

WordPress Plugin Premium SEO Pack 1.9.1.3 - wpoptions Overwrite Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions...

WordPress Plugin Premium SEO Pack 1.9.1.3 - wp_options Overwrite

Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Time line: Found 05-Jun-2016, Vendor notified 05-Jun-201...

Yoast SEO <= 3.2.5 - Unspecified Cross-Site Scripting (XSS)

Changelog file for version 3.3.0 states "Fixes an XSS issue, props Hristo Pandjarov."...

Uber: XSS in people.uber.com

From the HTML source code of http://people.uber.com I came to know that it uses Yoast WordPress SEO plugin v2.1.1 But it is known to suffer from XSS bug. Check it for more details and steps: https://wpvulndb.com/vulnerabilities/8045 Bug can be easily fixed upgrading the plugin. Thanks...

brafton WordPress Plugin <=3.4.7 - Reflected XSS

Title -brafton WordPress Plugin XSS Exploit Title : Vulnerabilitie XSS in brafton WordPress Plugin Date: Fri May 20 2016 Reported Date : Fri May 20 2016 Vendor Homepage: http://www.brafton.com/support/wordpress/ Version: v3.3.10 – January2016 Software Link:...

Wordpress Seo Link Rotator 插件-pusher.php文件title参数--跨站脚本漏洞

漏洞详情 漏洞标题 : Wordpress Seo Link Rotator 插件-pusher.php文件title参数--跨站脚本漏洞 插件首页 : http://www.seolinkrotator.com 下载链接 : http://www.seolinkrotator.com/download/files/seolinkrotator.zip 存在跨站漏洞的文件为pusher.php ，未做输入输出转义过滤: Link To This If you would like to share this with someone else just copy and paste th...

Yoast SEO <= 3.2.4 - Subscriber Settings Sensitive Data Exposure

The Yoast SEO WordPress plugin was affected by a Subscriber Settings Sensitive Data Exposure security vulnerability...

seo-servis.cz XSS vulnerability

Vulnerable URL: http://seo-servis.cz/searching/?q=%3C/title%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C/script%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 61362 VIP websi...

WordPress Google SEO Pressor Snippet 1.2.6 XSS

FULL DISCLOSURE Product : Google SEO Pressor Snippet Plugin Exploit Author : Rahul Pratap Singh Version :1.2.6 Home page Link : https://wordpress.org/plugins/google-seo-author-snippets/ Website : 0x62626262.wordpress.com Linkedin : https://in.linkedin.com/in/rahulpratapsingh94 Date : 21/4/2016 XS...

Google SEO Pressor Snippet <= 1.2.6 - Reflected Cross-Site Scripting (XSS)

The Google SEO Pressor for Rich snippets WordPress plugin was affected by a Reflected Cross-Site Scripting XSS security vulnerability...