24 matches found
CVE-2023-45269
Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 2.0.25 versions...
WordPress Simple SEO plugin cross-site scripting vulnerability
WordPress Simple SEO plugin is an SEO optimization tool designed based on the SimpleTags plugin, which is mainly used to help users simplify search engine optimization SEO operations. WordPress Simple SEO plugin suffers from a cross-site scripting vulnerability that stems from the application's...
CVE-2025-10357
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
EUVD-2025-34141
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
CVE-2025-10357
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
CVE-2025-10357 Simple SEO < 2.0.32 - Contributor+ Stored XSS
The Simple SEO WordPress plugin before 2.0.32 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks...
WordPress plugin Simple SEO 安全漏洞
WordPress Simple SEO plugin is an SEO optimization tool designed based on the SimpleTags plugin, which is mainly used to help users simplify search engine optimization SEO operations. WordPress Simple SEO plugin suffers from a cross-site scripting vulnerability that stems from the application's...
PT-2025-41847
Name of the Vulnerable Software and Affected Versions Simple SEO WordPress plugin versions prior to 2.0.32 Description The software does not properly sanitize and escape parameters when outputting them on the page. This could allow users with a contributor role or higher to perform Cross-Site...
EUVD-2023-49575
Malicious code in bioql PyPI...
EUVD-2022-47563
Malicious code in bioql PyPI...
CVE-2023-45269
Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 2.0.25 versions...
CVE-2023-45269
CVE-2023-45269 - CSRF in WordPress Simple SEO plugin (
Wordpress Plugin Simple SEO Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
PT-2023-29475 · Unknown · David Cole Simple Seo
Name of the Vulnerable Software and Affected Versions: David Cole Simple SEO plugin versions prior to 2.0.25 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a...
CVE-2022-44627
Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...
CVE-2022-44627
Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...
CVE-2022-44627
CVE-2022-44627 concerns the WordPress Simple SEO plugin (versions ≤ 1.8.12). The root cause is a Cross-Site Request Forgery (CSRF) vulnerability in the plugin’s sitemap creation/deletion logic, which can allow an attacker to make an authenticated admin create or delete sitemaps. Multiple sources ...
CVE-2022-44627 WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...
PT-2022-27269 · Unknown · David Cole Simple Seo
Name of the Vulnerable Software and Affected Versions: David Cole Simple SEO plugin version 1.8.12 and earlier Description: A Cross-Site Request Forgery CSRF issue allows attackers to create or delete sitemaps. This can be exploited by attackers to manipulate the website's SEO settings...
CVE-2022-1628
The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by authenticated users with Contributor and...