Lucene search
K

29 matches found

Nuclei
Nuclei
added yesterday17 views

WordPress SEO Tools Plugin 4.0.7 - Cross-Site Scripting

The SEO Tools WordPress plugin through version 4.0.7 contains a reflected cross-site scripting vulnerability. The plugin does not properly sanitize and escape the 'src' parameter in the rssread.php file before outputting it back in the page, which could allow attackers to execute arbitrary...

6.1CVSS7.5AI score0.02005EPSS
Exploits1References2
CNNVD
CNNVD
added 2025/12/09 12:0 a.m.2 views

WordPress plugin BERTHA AI 安全漏洞

WordPress BERTHA AI plugin is an artificial intelligence plugin designed for WordPress websites, the main features include automated content generation, image creation and SEO optimization, designed to improve the efficiency of website content creation. A lack of authorization vulnerability exist...

5.3CVSS6.7AI score0.00038EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-54184

Malicious code in bioql PyPI...

6.1CVSS9.1AI score0.02005EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-11102

Malicious code in bioql PyPI...

7.1CVSS7.7AI score0.00257EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/17 11:0 p.m.13 views

CVE-2025-30984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dzynit SEO Tools seo-automatic-seo-tools allows Reflected XSS.This issue affects SEO Tools: from n/a through = 4.0.7...

7.1CVSS7.2AI score0.00257EPSS
Exploits0References1
NVD
NVD
added 2025/04/15 10:15 p.m.10 views

CVE-2025-30984

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dzynit SEO Tools seo-automatic-seo-tools allows Reflected XSS.This issue affects SEO Tools: from n/a through = 4.0.7...

7.1CVSS0.00257EPSS
Exploits0References1
CVE
CVE
added 2025/04/15 9:53 p.m.46 views

CVE-2025-30984

CVE-2025-30984 describes a Reflected XSS in the WordPress SEO Tools (NotFound SEO Tools) plugin, with impact on SEO Tools versions up to 4.0.7. Public references (NVD/CVEs) show a CVSS v3.1 base score of 7.1 (HIGH), attack vector NETWORK, no privileges required, user interaction REQUIRED, and imp...

7.1CVSS7.2AI score0.00257EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/15 9:53 p.m.14 views

CVE-2025-30984 WordPress SEO Tools plugin <= 4.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dzynit SEO Tools seo-automatic-seo-tools allows Reflected XSS.This issue affects SEO Tools: from n/a through = 4.0.7...

7.1CVSS0.00257EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/15 9:53 p.m.5 views

CVE-2025-30984 WordPress SEO Tools plugin <= 4.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Dzynit SEO Tools seo-automatic-seo-tools allows Reflected XSS.This issue affects SEO Tools: from n/a through = 4.0.7...

7.1CVSS7.3AI score0.00257EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/04/15 12:0 a.m.1 views

WordPress plugin SEO Tools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

7.1CVSS7AI score0.00257EPSS
Exploits0References2
Patchstack
Patchstack
added 2025/04/02 1:57 p.m.2 views

WordPress SEO Tools plugin <= 4.0.7 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by João Pedro S Alcântara Kinorth in WordPress Plugin SEO Tools versions = 4.0.7...

7.1CVSS6.9AI score0.00257EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2025/03/15 4:43 a.m.9 views

CVE-2024-13853

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS6AI score0.02005EPSS
Exploits1References1
NVD
NVD
added 2025/03/11 6:15 a.m.5 views

CVE-2024-13853

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS0.02005EPSS
Exploits1References1
OSV
OSV
added 2025/03/11 6:15 a.m.1 views

CVE-2024-13853

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

6.1CVSS7.3AI score
Exploits0References1
CVE
CVE
added 2025/03/11 6:0 a.m.64 views

CVE-2024-13853

The CVE-2024-13853 entry concerns the WordPress SEO Tools plugin (version up to 4.0.7). Affected component: rssread.php parameter handling of the 'src' parameter, where improper sanitisation/escaping allows reflected cross-site scripting. This could let an attacker execute arbitrary JavaScript in...

6.1CVSS6.2AI score0.02005EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2025/03/11 6:0 a.m.11 views

CVE-2024-13853 SEO Tools <= 4.0.7 - Reflected XSS

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

0.02005EPSS
Exploits1References1
Vulnrichment
Vulnrichment
added 2025/03/11 6:0 a.m.7 views

CVE-2024-13853 SEO Tools <= 4.0.7 - Reflected XSS

The SEO Tools WordPress plugin through 4.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

5.8AI score0.02005EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/03/11 12:0 a.m.1 views

WordPress plugin SEO Tools 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.1CVSS8.1AI score0.02005EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2024/11/25 12:0 a.m.29 views

Rank Math SEO with AI SEO Tools Plugin < 1.0.229 Multiple Vulnerabilities

The WordPress plugin SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rankmath:seo"; ifdescription...

7.2CVSS6.9AI score0.23642EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/14 12:0 a.m.1 views

WordPress plugin Rank Math SEO with AI Best SEO Tools 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS6.2AI score0.00172EPSS
Exploits0References5
Rows per page
Query Builder