EUVD-2025-4057

Malicious code in bioql PyPI...

CVE-2025-25147

Cross-Site Request Forgery CSRF vulnerability in Phillip.Gooch Auto SEO auto-seo allows Stored XSS.This issue affects Auto SEO: from n/a through = 2.5.6...

CVE-2025-25147

Cross-Site Request Forgery CSRF vulnerability in Phillip.Gooch Auto SEO auto-seo allows Stored XSS.This issue affects Auto SEO: from n/a through = 2.5.6...

CVE-2025-25147 WordPress Auto SEO plugin <= 2.5.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Phillip.Gooch Auto SEO auto-seo allows Stored XSS.This issue affects Auto SEO: from n/a through = 2.5.6...

CVE-2025-25147

CVE-2025-25147 is a CSRF-to-Stored-XSS vulnerability in the WordPress plugin Auto SEO (versions n/a through 2.5.6). The connected sources confirm the issue class and affected range, with remediation noted as updating to a version later than 2.5.6. The Wordfence vulnerability page lists the patch ...

CVE-2025-25147 WordPress Auto SEO plugin <= 2.5.6 - CSRF to Stored XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in Phillip.Gooch Auto SEO allows Stored XSS. This issue affects Auto SEO: from n/a through 2.5.6...

CVE-2025-25147: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Phillip.Gooch Auto SEO auto-seo allows Stored XSS.This issue affects Auto SEO: from n/a through = 2.5.6...

WordPress plugin Auto SEO 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WordPress WordPress Auto SEO Plugin – Upfiv SEO Wizard plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Auto SEO Plugin – Upfiv SEO Wizard plugin versions = 1.0.6. Solution No patched version available...

WordPress WordPress Auto SEO Plugin – Upfiv SEO Wizard plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Auto SEO Plugin – Upfiv SEO Wizard plugin versions = 1.0.6. Solution No patched version available...

CVE-2012-2309

Summary of CVE-2012-2309 (Drupal Glossify module) : The vulnerability is a cross-site scripting (XSS) flaw in the Glossify Internal Links Auto SEO contributed module for Drupal 6.x-2.5 and earlier. It allows remote authenticated users with certain roles to inject arbitrary web script or HTML via ...

CVE-2012-2309: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Glossify Internal Links Auto SEO module for Drupal 6.x-2.5 and earlier allows remote authenticated users with certain roles to inject arbitrary web script or HTML via unspecified vectors...

PT-2012-3942

Name of the Vulnerable Software and Affected Versions Glossify Internal Links Auto SEO module for Drupal versions 6.x-2.5 and earlier Description A cross-site scripting XSS issue exists, allowing remote authenticated users with certain roles to inject arbitrary web script or HTML. This can be...