CVE-2015-2293: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin before 1.5.7, 1.6.x before 1.6.4, and 1.7.x before 1.7.4 for WordPress allow remote attackers to hijack the authentication of certain users for requests that...

WordPress SEO by Yoast 1.7.3.3 SQL Injection Vulnerability

WordPress SEO by Yoast plugin versions 1.7.3.3 and below suffer from a remote blind SQL injection vulnerability. Title: WordPress SEO by Yoast = 1.7.3.3 - Blind SQL Injection Version/s Tested: 1.7.3.3 Patched Version: 1.7.4 CVSSv2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2...

WordPress SEO By Yoast 1.7.3.3 SQL Injection

Title: WordPress SEO by Yoast = 1.7.3.3 - Blind SQL Injection Version/s Tested: 1.7.3.3 Patched Version: 1.7.4 CVSSv2 Base Score: 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C CVSSv2 Temporal Score: 7 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C WPVULNDB: https://wpvulndb.com/vulnerabilities/7841...

WordPress Seo Link Rotator 'title' Parameter Cross Site Scripting Vulnerability

WordPress Seo Link Rotator Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress SEO Tools 3.0 Local File Inclusion

------------------------------------------------------------------------ Software................WordPress SEO Tools by SEO Automatic 3.0 Vulnerability...........Local File Inclusion Download................http://wordpress.org/extend/plugins/seo-automatic-seo-tools/ Release...