WordPress plugin Mind Doodle Visual Sitemaps & Tasks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-4535 · Unknown · Mind Doodle Visual Sitemaps & Tasks

Name of the Vulnerable Software and Affected Versions: Mind Doodle Visual Sitemaps & Tasks versions 1.6 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as 'Cross-site Scripting'. This allows for Stored XSS attacks...

CVE-2023-26514

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

CVE-2023-26514

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin = 1.3.3 versions...

CVE-2023-26514

CVE-2023-26514 is a CSRF vulnerability in the WordPress plugin WPGrim Dynamic XML Sitemaps Generator for Google (versions

PT-2023-20693 · WordPress · Wpgrim Dynamic Xml Sitemaps Generator

Name of the Vulnerable Software and Affected Versions: WPGrim Dynamic XML Sitemaps Generator for Google plugin versions prior to 1.3.3 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This means an attacker could potentially trick a user into performing...

PT-2023-16696 · WordPress · Wp Meta Seo

Name of the Vulnerable Software and Affected Versions: WP Meta SEO plugin for WordPress versions up to, and including, 4.5.3 Description: The issue arises from a missing capability check on the regenerateSitemaps function, allowing authenticated attackers with subscriber-level access to generate...

CVE-2023-1029

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the regenerateSitemaps function. This makes it possible for unauthenticated attackers to regenerate Sitemaps via a forg...

CVE-2023-1029

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the regenerateSitemaps function. This makes it possible for unauthenticated attackers to regenerate Sitemaps via a forg...

Cross site request forgery (csrf)

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the regenerateSitemaps function. This makes it possible for unauthenticated attackers to regenerate Sitemaps via a forg...

CVE-2023-1029 WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'

The WP Meta SEO plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.3. This is due to missing or incorrect nonce validation on the regenerateSitemaps function. This makes it possible for unauthenticated attackers to regenerate Sitemaps via a forg...

PT-2023-16701 · WordPress · Wp Meta Seo

Name of the Vulnerable Software and Affected Versions: WP Meta SEO plugin for WordPress versions up to and including 4.5.3 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the regenerateSitemaps function. This allows unauthenticated...

WordPress plugin WP Meta SEO 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

WP Meta SEO < 4.5.4 - Subscriber+ SiteMap Settings Update

The plugin does not have authorisation check when updating its SiteMaps settings, which could allow any authenticated users, such as subscriber to update them...

CVE-2022-44627

Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...

CVE-2022-44627

CVE-2022-44627 concerns the WordPress Simple SEO plugin (versions ≤ 1.8.12). The root cause is a Cross-Site Request Forgery (CSRF) vulnerability in the plugin’s sitemap creation/deletion logic, which can allow an attacker to make an authenticated admin create or delete sitemaps. Multiple sources ...

CVE-2022-44627 WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in David Cole Simple SEO plugin = 1.8.12 on WordPress allows attackers to create or delete sitemaps...

WordPress plugin David Cole Simple SEO 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

PT-2022-27269 · Unknown · David Cole Simple Seo

Name of the Vulnerable Software and Affected Versions: David Cole Simple SEO plugin version 1.8.12 and earlier Description: A Cross-Site Request Forgery CSRF issue allows attackers to create or delete sitemaps. This can be exploited by attackers to manipulate the website's SEO settings...