3241 matches found
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote attackers to hijack the authentication of certain users for requests that...
CVE-2015-2293
CVE-2015-2293 describes multiple CSRF vulnerabilities in the WordPress SEO by Yoast plugin for WordPress, enabling remote attackers to hijack user authentication and trigger SQL injection via the wpseo_bulk-editor page (parameters: order_by and order). Affected plugin versions: before 1.5.7, 1.6....
KLA10481 Multiple vulnerabilities in WordPress SEO plugin
Multiple CSRF and SQL injection vulnerabilities were found in WordPress SEO plugin. These vulnerabilities can be exploited remotely via vectors related to wpseobulk-editor page. Original advisories Plugin changelog Exploitation Public exploits exist for this vulnerability. Related products...
WordPress Plugin SEO by Yoast 1.7.3.3 - Blind SQL Injection
Title: WordPress SEO by Yoast = 1.7.3.3 - Blind SQL Injection Version/s Tested: 1.7.3.3 Patched Version: 1.7.4 CVSSv2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Temporal Score: 7 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C WPVULNDB: https://wpvulndb.com/vulnerabilities/7841...
WordPress Plugin SEO by Yoast 1.7.3.3 - Blind SQL Injection
WordPress Plugin SEO by Yoast 1.7.3.3 - Blind SQL Injection Title: WordPress SEO by Yoast = 1.7.3.3 - Blind SQL Injection Version/s Tested: 1.7.3.3 Patched Version: 1.7.4 CVSSv2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Temporal Score: 7...
WordPress SEO by Yoast 1.7.3.3 SQL Injection Vulnerability
WordPress SEO by Yoast plugin versions 1.7.3.3 and below suffer from a remote blind SQL injection vulnerability. Title: WordPress SEO by Yoast = 1.7.3.3 - Blind SQL Injection Version/s Tested: 1.7.3.3 Patched Version: 1.7.4 CVSSv2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2...
WordPress SEO By Yoast 1.7.3.3 SQL Injection
Title: WordPress SEO by Yoast = 1.7.3.3 - Blind SQL Injection Version/s Tested: 1.7.3.3 Patched Version: 1.7.4 CVSSv2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Temporal Score: 7 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C WPVULNDB: https://wpvulndb.com/vulnerabilities/7841...
SQL Injection Bug Fixed in Popular WordPress SEO Plug-In
SEO by Yoast, a popular search engine optimization plug-in for WordPress, has fixed a pair of blind SQL injection vulnerabilities that could have allowed an attacker to take complete control of affected sites. It’s not clear how many WordPress sites have SEO by Yoast installed, but the maker of t...
'WordPress SEO by Yoast' Plugin Vulnerability Affects Millions
A critical vulnerability has been discovered in the most popular plugin of the WordPress content management platform CMS that puts tens of Millions of websites at risks of being hacked by the attackers. The vulnerability actually resides in most versions of a WordPress plugin known as ‘WordPress...
SEO Toaster E-Commerce 2.2.0 Cross Site Scripting
Affected software: http://demo.seotoaster.com Type of vulnerability: clickjacking Version: E-Commerce 2.2.0 URL: http://www.seotoaster.com/ Discovered by: Provensec Website: http://www.provensec.com Description:Free SEO Software & CMS: All in One Proof of concept seo toaster search filed was vuln...
CVE-2014-100024
Cross-site scripting XSS vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-100024
Cross-site scripting XSS vulnerability in Seo Panel before 3.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-100024
SEO Panel is affected by a Cross-site Scripting (XSS) vulnerability prior to version 3.4.0. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Remediation: upgrade to at least 3.4.0 or apply vendor-supplied fixes once available; details on vectors ar...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from...
CVE-2014-100001
Cross-site request forgery CSRF vulnerability in the SEO Plugin LiveOptim plugin before 1.1.4-free for WordPress allows remote attackers to hijack the authentication of administrators for requests that change plugin settings via unspecified vectors. NOTE: some of these details are obtained from...
CVE-2014-100001
CVE-2014-100001 is a CSRF vulnerability in the WordPress plugin LiveOptim (SEO Plugin LiveOptim) before version 1.1.4-free . The issue allows remote attackers to hijack the authentication of administrators and perform requests that change plugin settings via unspecified vectors, effectively manip...
WordPress Greg's High Performance SEO Plugin <= 1.6.1 - Reflected XSS
This plugin is prone to a reflected cross site scripting, because $GET'submenu' is not escaped. Solution Upgrade this plugin...
