Lucene search
+L

58 matches found

NVD
NVD
•added 2026/09/17 2:17 p.m.•9 views

CVE-2026-78295

Unauthenticated Cross Site Request Forgery CSRF in Xagio SEO = 7.1.0.43 versions...

8.8CVSS0.00201EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 1:24 p.m.•39 views

CVE-2026-78295 WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Xagio SEO = 7.1.0.43 versions...

8.8CVSS0.00201EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 1:24 p.m.•14 views

EUVD-2026-81519

Unauthenticated Cross Site Request Forgery CSRF in Xagio SEO = 7.1.0.43 versions...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 1:24 p.m.•13 views

CVE-2026-78295 WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in Xagio SEO = 7.1.0.43 versions...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 1:24 p.m.•28 views

CVE-2026-78295

An unauthenticated Cross Site Request Forgery (CSRF) vulnerability affects the Xagio SEO WordPress plugin in versions ≤ 7.1.0.43 . The flaw was discovered by Matheo Beuve and rated CVSS 8.8 (High) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating that a remote, unauthenticated atta...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/17 12:00 a.m.•2 views

CVE-2026-78295: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in Xagio SEO = 7.1.0.43 versions...

8.8CVSS5.7AI score0.00201EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/09/16 6:12 p.m.•9 views

WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Matheo Beuve in WordPress Plugin Xagio SEO versions = 7.1.0.43...

8.8CVSS5.8AI score0.00201EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/03/26 5:01 p.m.•16 views

CVE-2026-24968

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through = 7.1.0.30...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/03/25 6:31 p.m.•16 views

EUVD-2026-15577

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through = 7.1.0.30...

5.8AI score0.00408EPSS
SaveExploits0References2
NVD
NVD
•added 2026/03/25 5:16 p.m.•14 views

CVE-2026-24968

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through = 7.1.0.30...

9.8CVSS0.00408EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/03/25 4:14 p.m.•45 views

CVE-2026-24968 WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through = 7.1.0.30...

9.8CVSS0.00408EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/03/25 4:14 p.m.•5 views

CVE-2026-24968 WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through = 7.1.0.30...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/03/25 12:00 a.m.•34 views

PT-2026-27861

Name of the Vulnerable Software and Affected Versions Xagio SEO versions n/a through 7.1.0.30 Description An incorrect privilege assignment exists in Xagio SEO. This allows for privilege escalation. Recommendations Update Xagio SEO to a version later than 7.1.0.30...

9.8CVSS5.9AI score0.00408EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/03/25 12:00 a.m.•20 views

WordPress plugin Xagio SEO 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/25 12:00 a.m.•0 views

CVE-2026-24968: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through = 7.1.0.30...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/03/12 11:57 a.m.•21 views

WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by daroo in WordPress Plugin Xagio SEO versions = 7.1.0.30...

9.8CVSS5.8AI score0.00408EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:18 a.m.•15 views

CVE-2025-14438

The Xagio SEO – AI Powered SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.1.0.30 via the 'pixabayDownloadImage' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests...

6.4CVSS5.7AI score0.00224EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/01/06 9:45 a.m.•25 views

WordPress Xagio SEO plugin <= 7.1.0.30 - Authenticated (Subscriber+) Server-Side Request Forgery vulnerability

Authenticated Subscriber+ Server-Side Request Forgery vulnerability discovered by Jack Taylor in WordPress Plugin Xagio SEO versions = 7.1.0.30...

6.4CVSS6.8AI score0.00224EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/01/06 5:15 a.m.•17 views

CVE-2025-14438

The Xagio SEO – AI Powered SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.1.0.30 via the 'pixabayDownloadImage' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests...

6.4CVSS0.00224EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2026/01/06 4:31 a.m.•9 views

CVE-2025-14438 Xagio SEO <= 7.1.0.30 - Authenticated (Subscriber+) Server-Side Request Forgery

The Xagio SEO – AI Powered SEO plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.1.0.30 via the 'pixabayDownloadImage' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests...

6.4CVSS5.4AI score0.00224EPSS
SaveExploits0References5
Rows per page
Query Builder