Lucene search
+L

7 matches found

CNVD
CNVD
•added 2015/04/08 12:00 a.m.•12 views

Wordpress The Semper Fi All in One SEO Pack Plugin Information Disclosure Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WordPress The Semper Fi All in One SEO Pack plugin is a wordpress-based SEO plugin. WordPress The Semper Fi All in...

5CVSS6.2AI score0.03008EPSS
SaveExploits0References1
Prion
Prion
•added 2015/04/03 10:59 a.m.•20 views

Design/Logic Flaw

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

5CVSS6.8AI score0.03008EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2015/04/03 10:00 a.m.•41 views

CVE-2015-0902

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

6.3AI score0.03008EPSS
SaveExploits0References3
CVE
CVE
•added 2015/04/03 10:00 a.m.•190 views

CVE-2015-0902

The CVE-2015-0902 entry concerns the WordPress plugin All in One SEO Pack (pre-2.2.6). The underlying issue is that the plugin does not consider password protection when generating the Meta Description, enabling remote attackers to read HTML source and disclose sensitive information. Affected sof...

5CVSS6.5AI score0.03008EPSS
SaveExploits0References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/04/03 12:00 a.m.•3 views

CVE-2015-0902: Exposure of Sensitive Information to an Unauthorized Actor

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

5CVSS6AI score0.03008EPSS
SaveExploits0References2
ThreatPost
ThreatPost
•added 2014/06/03 2:09 p.m.•11 views

WordPress All-In-One SEO Pack Vulnerabilities Patched

A web design firm has patched two privilege escalation vulnerabilities that could have led to cross-site scripting attacks in a popular WordPress plugin it manages. If left unpatched, the issue could leave potentially millions of websites vulnerable. The problem exists in old versions of the All ...

7.5AI score
SaveExploits0References6
Packet Storm
Packet Storm
•added 2013/10/02 12:00 a.m.•36 views

WordPress Semper Fi Cross Site Scripting

------------------------------------------------------------------------ Vendor: Semper Fi Web Design http://semperfiwebdesign.com/ Software: All in One SEO Pack Developer: Michael Torbert http://michaeltorbert.com/ Product URL: http://wordpress.org/plugins/all-in-one-seo-pack/ Changelog:...

7AI score
SaveExploits0
Rows per page
Query Builder