3241 matches found
deadfinder
Find dead-links broken links Documentation • Installation • Github Action • Contributing • Changelog Dead link broken link means a link within a web page that cannot be connected. These links can have a negative impact to SEO and Security. This tool makes it easy to identify and modify. Looking f...
quien
quien A better whois and domain intelligence toolkit. Interactive TUI with tabbed views for WHOIS, DNS, mail, SSL/TLS, HTTP headers, SEO analysis, and tech stack detection. Try it without installing: ssh quien.sh Install Homebrew root@kitploit: brew install quien Ubuntu / Debian root@kitploit: cu...
CVE-2021-39476
CVE-2021-39476 Se encontraron múltiples vulnerabilidades XSS en PhoenixCart 1.0.8.0 2x XSS en la misma página "Editar el título de la categoría para SEO:" "Editar la descripción de la categoría" Enlace: https://www.warcloudsecurity.com/ecommerce/index.php?cPath=1...
CVE-2025-22783
CVE-2025-22783 1️⃣ Tipo de componente Plugin de WordPress 2️⃣ Detalles del componente Component name Plugin SEO de Squirrly SEO Vulnerable version = 12.4.01 Component slug squirrly-seo Component link https://wordpress.org/plugins/squirrly-seo/ 3️⃣ OWASP 2017: TOP 10 Vulnerability class A3:...
CVE-2023-44766_ConcreteCMS-Stored-XSS---SEO
ConcreteCMS XSS Almacenado v.9.2.1 Autor: Sergio Descripción: La vulnerabilidad de Cross Site Scripting en ConcreteCMS v.9.2.1 permite a un atacante local ejecutar código arbitrario mediante un script manipulado en el campo SEO - Extra de Page Settings. Vectores de ataque: Scripting. Una...
deadfinder
デッドリンク（壊れたリンク）を見つける ドキュメント • インストール • GitHub Action • コントリビューション • 変更履歴 デッドリンク（壊れたリンク）とは、Webページ内の接続できないリンクのことです。これらのリンクはSEOやセキュリティに悪影響を与える可能性があります。このツールを使えば、簡単に特定・修正できます。 v1（Ruby gem）をお探しですか？ 現在は legacy/v1 ブランチに移行しており、バグ修正とセキュリティリリースのために deadfinder gem の公開を継続しています。main は Crystal...
WordPress Meta SEO <= 4.5.2 - Open Redirect
The WP Meta SEO WordPress plugin before 4.5.3 did not authorize several AJAX actions, which allowed low-privilege users to update certain data and resulted in an arbitrary redirect vulnerability. id: CVE-2023-0876 info: name: WordPress Meta SEO = 4.5.2 - Open Redirect author: Khalid6468 severity:...
Seo By 10Web < 1.2.7 - Cross-Site Scripting
The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. id:...
WordPress SEO Tools Plugin 4.0.7 - Cross-Site Scripting
The SEO Tools WordPress plugin through version 4.0.7 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the 'src' parameter in the rssread.php file before outputting it back in the page, which could allow attackers to execute arbitrary...
Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs that redirect to an external web site via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the...
CVE-2024-4041
CVE-2024-4041 Yoast SEO /?page=%22%20onmouseover%3D%22alertdocument.domain%22%20x%3D%22 3. En la barra de administración, abre el menú de Yoast y pasa el cursor o haz clic en Get Yoast SEO Premium. 4. El JavaScript se ejecuta desde el manejador de eventos inyectado , lo que confirma el XSS...
CVE-2026-78152
The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content...
CVE-2026-78152 SureRank 1.6.2 - 1.10.0 - Unauthenticated Author Email Disclosure via Person Schema
The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content...
EUVD-2026-76809
The SureRank SEO WordPress plugin before 1.10.1 does not exclude users' registered account email addresses from the structured data it outputs on public pages by default, allowing unauthenticated visitors to obtain the email address of any user who has published content...
CVE-2026-78152
SureRank SEO WordPress plugin versions 1.6.2 through 1.10.0 fail to exclude registered account email addresses from the Person Schema structured data it outputs on public pages by default. This allows unauthenticated visitors to enumerate the email addresses of any user who has published content,...
CVE-2024-12252
SEO LAT Auto Post = 2.2.1 - 远程代码执行 描述 WordPress 的 SEO LAT Auto Post 插件在 2.2.1 及之前的所有版本中，由于对 remoteupdate AJAX 操作缺少能力检查，因而存在文件覆盖漏洞。这使得未认证的攻击者能够覆盖 seo-beginner-auto-post.php 文件，并借此实现远程代码执行。 漏洞详情 CVE : CVE-2024-12252 CVSS 分数 : 9.8（严重） 漏洞利用 该脚本通过覆盖 seo-beginner-auto-post.php 文件来利用 SEO LAT Auto Post...
CVE-2026-62113
Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...
CVE-2026-62113 WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability
Contributor Insecure Direct Object References IDOR in Slim SEO = 4.10.0 versions...