Lucene search
+L

3154 matches found

Cvelist
Cvelist
added 2025/12/16 8:12 a.m.38 views

CVE-2025-67950 WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Blind SQL Injection.This issue affects All In One SEO Pack: from n/a through = 4.9.1...

8.5CVSS0.00296EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/16 8:12 a.m.6 views

CVE-2025-67950 WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Blind SQL Injection.This issue affects All In One SEO Pack: from n/a through = 4.9.1...

8.5CVSS7.3AI score0.00296EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/16 12:00 a.m.10 views

PT-2025-51434

Name of the Vulnerable Software and Affected Versions Syed Balkhi All In One SEO Pack versions through 4.9.1 Description A flaw exists in Syed Balkhi All In One SEO Pack that allows for Blind SQL Injection due to improper neutralization of special elements used in an SQL command. Recommendations...

8.5CVSS7.5AI score0.00296EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/16 12:00 a.m.9 views

WordPress plugin All In One SEO Pack 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

8.5CVSS7.5AI score0.00296EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/12 6:34 a.m.6 views

EUVD-2025-203040

Malicious code in camscanner-seo npm...

6.6AI score
SaveExploits0References1
OSV
OSV
added 2025/12/12 6:34 a.m.6 views

MAL-2025-192554 Malicious code in camscanner-seo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd71df3759dceae15fc1ad93919d9a90c9f0bdb044e2e131db061e1e24d253e The package camscanner-seo was found to contain malicious code. Source: ghsa-malware f19e688be1202e28d6c442ecb5e70b4a5e79e7bb33559ff5669948b969324076...

6.8AI score
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/12 6:34 a.m.12 views

Malicious code in camscanner-seo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fd71df3759dceae15fc1ad93919d9a90c9f0bdb044e2e131db061e1e24d253e The package camscanner-seo was found to contain malicious code. Source: ghsa-malware f19e688be1202e28d6c442ecb5e70b4a5e79e7bb33559ff5669948b969324076...

6.9AI score
SaveExploits0References3
Snyk
Snyk
added 2025/12/12 6:34 a.m.12 views

Malicious Package

Overview camscanner-seo is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS6.8AI score
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/12/10 3:13 p.m.6 views

CVE-2025-63025

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.37...

4.3CVSS5.7AI score0.00217EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/09 6:30 p.m.7 views

EUVD-2025-201992

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.29...

6.5AI score0.00217EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/09 2:52 p.m.1 views

CVE-2025-63025 WordPress Xagio SEO plugin <= 7.1.0.37 - Broken Access Control vulnerability

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.37...

4.3CVSS5.1AI score0.00217EPSS
SaveExploits0References1
CVE
CVE
added 2025/12/09 2:52 p.m.13 views

CVE-2025-63025

CVE-2025-63025 covers a Missing Authorization/Broken Access Control in the WordPress plugin Xagio SEO (xagio-seo). Multiple sources confirm the issue affects versions up to 7.1.0.29 (Wordfence/NVD entry) with a published remediation path indicating a fixed release later in the 7.1.x line (e.g., P...

4.3CVSS5.7AI score0.00217EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/09 2:52 p.m.30 views

CVE-2025-63025 WordPress Xagio SEO plugin <= 7.1.0.37 - Broken Access Control vulnerability

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.37...

4.3CVSS0.00217EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.6 views

WordPress plugin Xagio SEO 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

4.3CVSS6.5AI score0.00217EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/09 12:00 a.m.6 views

PT-2025-50037

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through = 7.1.0.29...

7AI score0.00217EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/09 12:00 a.m.9 views

WordPress plugin BERTHA AI 安全漏洞

WordPress BERTHA AI plugin is an artificial intelligence plugin designed for WordPress websites, the main features include automated content generation, image creation and SEO optimization, designed to improve the efficiency of website content creation. A lack of authorization vulnerability exist...

5.3CVSS6.7AI score0.00327EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/12/06 6:34 a.m.23 views

WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerability

SQL Injection vulnerability discovered by mcdruid in WordPress Plugin All In One SEO Pack versions = 4.9.1...

8.5CVSS8.1AI score0.00296EPSS
SaveExploits0Affected Software1
The Hacker News
The Hacker News
added 2025/12/04 5:25 p.m.18 views

Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

The threat actor known as Silver Fox has been spotted orchestrating a false flag operation to mimic a Russian threat group in attacks targeting organizations in China. The search engine optimization SEO poisoning campaign leverages Microsoft Teams lures to trick unsuspecting users into downloadin...

7.3AI score
SaveExploits0
Patchstack
Patchstack
added 2025/12/04 3:30 a.m.7 views

WordPress Xagio SEO plugin <= 7.1.0.34 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Xagio SEO versions = 7.1.0.34...

4.3CVSS5.4AI score0.00217EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2025/11/26 12:48 p.m.11 views

WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Abu Hurayra in WordPress Plugin All In One SEO Pack versions = 4.8.6.1...

6.5CVSS7AI score0.00308EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder