CVE-2026-9289

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST API endpoints. This is due to the plugin registering the /wordlift/v1/jsonld/ routes jsonld/id, jsonld/http/itemid,...

CVE-2026-9289

WordLift – AI powered SEO – Schema plugin for WordPress (versions up to and including 3.54.10 ) is vulnerable to unauthenticated sensitive information exposure via its JSON-LD REST API endpoints (/wordlift/v1/jsonld/). The root cause is that these routes are registered with a permission_callback ...

CVE-2026-9289 WordLift <= 3.54.10 - Unauthenticated Sensitive Information Exposure in JSON-LD REST API Endpoints

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST API endpoints. This is due to the plugin registering the /wordlift/v1/jsonld/ routes jsonld/id, jsonld/http/itemid,...

EUVD-2026-83565

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST API endpoints. This is due to the plugin registering the /wordlift/v1/jsonld/ routes jsonld/id, jsonld/http/itemid,...

CVE-2026-9289 WordLift <= 3.54.10 - Unauthenticated Sensitive Information Exposure in JSON-LD REST API Endpoints

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST API endpoints. This is due to the plugin registering the /wordlift/v1/jsonld/ routes jsonld/id, jsonld/http/itemid,...

CVE-2026-9289: Exposure of Sensitive Information to an Unauthorized Actor

The WordLift – AI powered SEO – Schema plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.54.10 via the JSON-LD REST API endpoints. This is due to the plugin registering the /wordlift/v1/jsonld/ routes jsonld/id, jsonld/http/itemid,...

PT-2026-95805

Name of the Vulnerable Software and Affected Versions WordLift – AI powered SEO – Schema plugin for WordPress versions prior to 3.54.11 Description Sensitive information exposure occurs via the JSON-LD REST API endpoints. The plugin registers the '/wordlift/v1/jsonld/' routes, specifically...

EUVD-2024-50650

Malicious code in bioql PyPI...

EUVD-2025-24903

Malicious code in bioql PyPI...

EUVD-2025-17190

Malicious code in bioql PyPI...

CVE-2025-53582

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-53582

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-53582

CVE-2025-53582 is a stored XSS vulnerability in WordLift WordLift (WordLift plugin) affecting versions up to 3.54.5. The issue arises from improper neutralization of input during web page generation. Reports from Patchstack/Wordfence/CVEs indicate a patch version beyond 3.54.5 is available, and W...

CVE-2025-53582 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-53582 WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

WordPress WordLift Plugin <= 3.54.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by muhammad yudha in WordPress Plugin WordLift versions = 3.54.5...

WordPress plugin WordLift 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-33378 · WordPress · Wordlift

Name of the Vulnerable Software and Affected Versions: WordLift versions through 3.54.5 Description: WordLift is susceptible to a cross-site scripting XSS issue that allows for stored XSS attacks. This occurs due to improper neutralization of input during web page generation. Recommendations:...

CVE-2025-53582: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordLift WordLift wordlift allows Stored XSS.This issue affects WordLift: from n/a through = 3.54.5...

CVE-2025-30624

Missing Authorization vulnerability in WordLift WordLift wordlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordLift: from n/a through = 3.54.4...