CVE-2024-3665: Improper Neutralization of Input During Web Page Generation

The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's HowTo and FAQ widgets in all versions up to, and including, 1.0.216 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible...

CVE-2024-2536

The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

CVE-2024-2536: Improper Input Validation

The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

WordPress BAVOKO SEO Tools – All-in-One WordPress SEO Plugin <= 2.1.9.12 is vulnerable to Cross Site Scripting (XSS)

Software BAVOKO SEO Tools – All-in-One WordPress SEO Type Plugin Vulnerable versions = 2.1.9.12 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID bc4738883f56 Credits Raf...

Artesãos SEOTools 输入验证错误漏洞

SEOTools is an Artesãos open source SEO tool for Laravel and Lumen. Artesãos SEOTools prior to version 0.17.2 has an input validation error vulnerability that stems from a problem with the function eachValue in the file TwitterCards.php, where manipulation of the parameter value results in an ope...

WordPress BAVOKO SEO Tools – All-in-One WordPress SEO plugin <= 2.1.9.12 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress BAVOKO SEO Tools – All-in-One WordPress SEO plugin versions = 2.1.9.12. Solution No patched version available...

internetmarketingninjas.com XSS vulnerability

Open Bug Bounty ID: OBB-669536 Description| Value ---|--- Affected Website:| internetmarketingninjas.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

SEO Tools Plugin for WordPress 'file' Parameter Arbitrary File Access

The version of the SEO Tools plugin for WordPress installed on the remote host does not sanitize input to the 'file' parameter of the 'feedcommander/getdownload.php' script before using it to return the contents of a file. An unauthenticated, remote attacker can exploit this issue to disclose the...

WordPress SEO Tools 3.0 Local File Inclusion

------------------------------------------------------------------------ Software................WordPress SEO Tools by SEO Automatic 3.0 Vulnerability...........Local File Inclusion Download................http://wordpress.org/extend/plugins/seo-automatic-seo-tools/ Release...

WordPress Plugin SEO Tools 3.0 - file Directory Traversal

WordPress Plugin SEO Tools 3.0 - file Directory Traversal source: https://www.securityfocus.com/bid/44710/info The SEO Tools plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an...

WordPress Plugin SEO Tools 3.0 - 'file' Directory Traversal

source: https://www.securityfocus.com/bid/44710/info The SEO Tools plugin for WordPress is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue can allow an attacker to obtain sensitive information that could aid in...