WordPress All in One SEO Pack 2.3.6.1 Plugin - Persistent Cross-Site Scripting

Exploit for php platform in category web applications Persistent Cross-Site Scripting in All in One SEO Pack WordPress Plugin David Vaartjes Abstract A stored Cross-Site Scripting vulnerability was found in the Bot Blocker functionality of the All in One SEO Pack WordPress Plugin 1+ million activ...

All in One SEO Pack <= 2.3.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

Requires 'Track Blocked Bots setting' to be enabled which it is not by default...

WordPress Premium SEO Pack 1.9.1.3 wp_options Overwrite

Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Time line: Found 05-Jun-2016, Vendor notified 05-Jun-201...

WordPress Plugin Premium SEO Pack 1.9.1.3 - wp_options Overwrite

WordPress Plugin Premium SEO Pack 1.9.1.3 - wpoptions Overwrite Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions...

WordPress Plugin Premium SEO Pack 1.9.1.3 - wp_options Overwrite

Vendor Homepage: http://aa-team.com/ Software Link: http://codecanyon.net/item/premium-seo-pack-wordpress-plugin/6109437?srank=2 Version: 1.9.1.3 Tested on: Debian 8, PHP 5.6.17-3 Type: Authenticated customer, subscriber wpoptions overwrite Time line: Found 05-Jun-2016, Vendor notified 05-Jun-201...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Privilege Escalation

This plugin is prone to an unspecified privilege escalation vulnerability. Solution Update the plugin...

WordPress All in One SEO Pack Plugin <= 2.1.5 - Cross Site Scripting

This plugin is prone to a cross site scripting vulnerability via aioseopfunctions.php newmeta parameter. Solution Update the plugin...

WordPress Premium SEO Pack Plugin <= 1.8.0 - Multiple Vulnerabilities

This plugin is prone to a local file disclosure and remote code execution vulnerabilities. Solution Update the plugin...

Premium SEO Pack 1.8.0 - Unauthenicated Arbitrary File Upload & LFD

This plugin is vulnerable to Local File Disclosure and Remote Code Execute via Arbitrary File Upload. PoC BASE64 ENCODED SHELL...

Wordpress The Semper Fi All in One SEO Pack Plugin Information Disclosure Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WordPress The Semper Fi All in One SEO Pack plugin is a wordpress-based SEO plugin. WordPress The Semper Fi All in...

CVE-2015-0902

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

CVE-2015-0902

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code...

CVE-2015-0902

The CVE-2015-0902 entry concerns the WordPress plugin All in One SEO Pack (pre-2.2.6). The underlying issue is that the plugin does not consider password protection when generating the Meta Description, enabling remote attackers to read HTML source and disclose sensitive information. Affected sof...

WordPress All In One SEO Pack 2.2.2 Cross Site Scripting

Author: 1N3 Website: http://xerosecurity.com Vendor Website: https://wordpress.org/plugins/all-in-one-seo-pack/ Affected Product: All In One SEO Pack Affected Version: 2.2.2 ABOUT: All in One SEO Pack is a WordPress SEO plugin to automatically optimize your WordPress blog for Search Engines such ...

WordPress All-In-One SEO Pack Vulnerabilities Patched

A web design firm has patched two privilege escalation vulnerabilities that could have led to cross-site scripting attacks in a popular WordPress plugin it manages. If left unpatched, the issue could leave potentially millions of websites vulnerable. The problem exists in old versions of the All ...

WordPress Semper Fi Cross Site Scripting

------------------------------------------------------------------------ Vendor: Semper Fi Web Design http://semperfiwebdesign.com/ Software: All in One SEO Pack Developer: Michael Torbert http://michaeltorbert.com/ Product URL: http://wordpress.org/plugins/all-in-one-seo-pack/ Changelog:...

CVE-2013-4719

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the SEO Pack for ttnews extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4719

CVE-2013-4719 is a SQL injection vulnerability in the TYPO3 SEO Pack’s tt_news extension, affecting versions prior to 1.3.3. The weakness allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected software is the TYPO3 SEO Pack for tt_news; the exact root cause de...