CVE-2023-2224

The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-45065

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...

CVE-2022-45065

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...

Cross site scripting

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...

CVE-2022-45065

CVE-2022-45065 affects the WordPress Squirrly SEO Plugin (versions ≤ 12.1.20). The issue is an unauthenticated reflected Cross-Site Scripting (XSS). Patch: upgrade to version 12.1.21 where the fix is implemented. If upgrading isn’t possible, apply vendor-supplied mitigations per Patchstack entry....

CVE-2022-45065

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...

CVE-2022-45065 WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...

CVE-2022-45065 WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...

PT-2023-14582 · Unknown · Squirrly Seo Plugin

Name of the Vulnerable Software and Affected Versions: Squirrly SEO Plugin versions prior to 12.1.20 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them...

CVE-2022-45065: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin = 12.1.20 versions...

WordPress Plugin WP Meta SEO 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation error vulnerabilit...

WordPress Plugin WP Meta SEO SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability exists i...

PT-2023-16579 · WordPress · Wp Meta Seo

Name of the Vulnerable Software and Affected Versions: WP Meta SEO WordPress plugin versions prior to 4.5.3 Description: The issue is related to a blind SQL Injection vulnerability. It occurs because the plugin does not properly sanitize and escape inputs into SQL queries. This can be exploited b...

WordPress SEO Plugin by Squirrly SEO Plugin <= 12.1.20 is vulnerable to Cross Site Scripting (XSS)

Software SEO Plugin by Squirrly SEO Type Plugin Vulnerable versions = 12.1.20 Fixed in 12.1.21 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-45065 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c1252b2f7863 Credits...

VulnCheck KEV: CVE-2022-44626

Missing Authorization vulnerability in Squirrly SEO Plugin by Squirrly SEO.This issue affects SEO Plugin by Squirrly SEO: from n/a through 12.1.20...

CVE-2023-1024

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the regenerateSitemaps function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to generate sitemaps...

CVE-2023-1028

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the setIgnore function. This makes it possible for unauthenticated attackers to update plugin options via a forged...

CVE-2023-1027

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post...

CVE-2023-1022

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized options update due to a missing capability check on the wpmsGGSaveInformation function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to update google...

Design/Logic Flaw

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post...