Lucene search
K

24 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 9:27 a.m.3 views

CVE-2023-45269

Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 2.0.25 versions...

5.4CVSS7.1AI score0.00048EPSS
Exploits0References1
CNVD
CNVD
added 2025/10/17 12:0 a.m.3 views

WordPress Simple SEO plugin cross-site scripting vulnerability

WordPress Simple SEO plugin is an SEO optimization tool designed based on the SimpleTags plugin, which is mainly used to help users simplify search engine optimization SEO operations. WordPress Simple SEO plugin suffers from a cross-site scripting vulnerability that stems from the application's...

6.1CVSS6.2AI score0.00025EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 6:36 a.m.3 views

CVE-2025-10357

The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

6.1CVSS6AI score0.00025EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/14 6:31 a.m.1 views

EUVD-2025-34141

The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

6.1CVSS5.5AI score0.00025EPSS
Exploits0References3
NVD
NVD
added 2025/10/14 6:15 a.m.1 views

CVE-2025-10357

The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

6.1CVSS0.00025EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/10/14 6:0 a.m.4 views

CVE-2025-10357 Simple SEO < 2.0.32 - Contributor+ Stored XSS

The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...

0.00025EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/10/14 12:0 a.m.2 views

WordPress plugin Simple SEO 安全漏洞

WordPress Simple SEO plugin is an SEO optimization tool designed based on the SimpleTags plugin, which is mainly used to help users simplify search engine optimization SEO operations. WordPress Simple SEO plugin suffers from a cross-site scripting vulnerability that stems from the application's...

6.1CVSS6AI score0.00025EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/10/14 12:0 a.m.2 views

PT-2025-41847

Name of the Vulnerable Software and Affected Versions Simple SEO WordPress plugin versions prior to 2.0.32 Description The software does not properly sanitize and escape parameters when outputting them on the page. This could allow users with a contributor role or higher to perform Cross-Site...

6.1CVSS5.8AI score0.00025EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-49575

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.00048EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-47563

Malicious code in bioql PyPI...

5.4CVSS5.7AI score0.00093EPSS
Exploits0References2
OSV
OSV
added 2023/10/13 4:15 p.m.1 views

CVE-2023-45269

Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 2.0.25 versions...

5.4CVSS7.3AI score
Exploits0References1
CVE
CVE
added 2023/10/13 3:0 p.m.46 views

CVE-2023-45269

CVE-2023-45269 - CSRF in WordPress Simple SEO plugin (

5.4CVSS6AI score0.00048EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2023/10/13 12:0 a.m.1 views

Wordpress Plugin Simple SEO Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS6.5AI score0.00048EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/10/13 12:0 a.m.1 views

PT-2023-29475 · Unknown · David Cole Simple Seo

Name of the Vulnerable Software and Affected Versions: David Cole Simple SEO plugin versions prior to 2.0.25 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...

5.4CVSS6.1AI score0.00048EPSS
Exploits0References4
OSV
OSV
added 2022/11/03 8:15 p.m.1 views

CVE-2022-44627

Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...

5.4CVSS5.8AI score0.00093EPSS
Exploits0References2
NVD
NVD
added 2022/11/03 8:15 p.m.6 views

CVE-2022-44627

Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...

5.4CVSS0.00093EPSS
Exploits0References2
CVE
CVE
added 2022/11/03 7:30 p.m.49 views

CVE-2022-44627

CVE-2022-44627 concerns the WordPress Simple SEO plugin (versions ≤ 1.8.12). The root cause is a Cross-Site Request Forgery (CSRF) vulnerability in the plugin’s sitemap creation/deletion logic, which can allow an attacker to make an authenticated admin create or delete sitemaps. Multiple sources ...

5.4CVSS5.5AI score0.00093EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/03 7:30 p.m.4 views

CVE-2022-44627 WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...

5.4CVSS5.5AI score0.00093EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/11/03 12:0 a.m.1 views

PT-2022-27269 · Unknown · David Cole Simple Seo

Name of the Vulnerable Software and Affected Versions: David Cole Simple SEO plugin version 1.8.12 and earlier Description: A Cross-Site Request Forgery CSRF issue allows attackers to create or delete sitemaps. This can be exploited by attackers to manipulate the website's SEO settings...

5.4CVSS5.4AI score0.00093EPSS
Exploits0References5
OSV
OSV
added 2022/09/06 6:15 p.m.1 views

CVE-2022-1628

The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by authenticated users with Contributor and...

5.4CVSS5.9AI score0.00187EPSS
Exploits0References2
Rows per page
Query Builder