Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
seo vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv2
CVE-2015-2292
Multiple SQL injection vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) order_...
Yoast Wordpress Seo 1.6.2
Yoast Wordpress Seo 1.6.3
Yoast Wordpress Seo
Yoast Wordpress Seo 1.7.3
Yoast Wordpress Seo 1.7.3.1
Yoast Wordpress Seo 1.6.0
Yoast Wordpress Seo 1.6.1
Yoast Wordpress Seo 1.7.3.2
Yoast Wordpress Seo 1.7.3.3
Yoast Wordpress Seo 1.7.1
Yoast Wordpress Seo 1.7.2
1 EDB exploit
6.8
CVSSv2
CVE-2015-2293
Multiple cross-site request forgery (CSRF) vulnerabilities in admin/class-bulk-editor-list-table.php in the WordPress SEO by Yoast plugin prior to 1.5.7, 1.6.x prior to 1.6.4, and 1.7.x prior to 1.7.4 for WordPress allow remote malicious users to hijack the authentication of cert...
Yoast Wordpress Seo 1.7.2
Yoast Wordpress Seo 1.7.3
Yoast Wordpress Seo 1.7.3.1
Yoast Wordpress Seo 1.7.3.2
Yoast Wordpress Seo
Yoast Wordpress Seo 1.6.0
Yoast Wordpress Seo 1.6.2
Yoast Wordpress Seo 1.7.1
Yoast Wordpress Seo 1.7.3.3
Yoast Wordpress Seo 1.6.1
Yoast Wordpress Seo 1.6.3
6.8
CVSSv2
CVE-2021-34632
The SEO Backlinks WordPress plugin is vulnerable to Cross-Site Request Forgery via the loc_config function found in the ~/seo-backlinks.php file which allows malicious users to inject arbitrary web scripts, in versions up to and including 4.0.1.
Seo Backlinks Project Seo Backlinks
4.3
CVSSv2
CVE-2005-2333
Cross-site scripting (XSS) vulnerability in smilies_popup.php in SEO-Board 1.0 allows remote malicious users to inject arbitrary web script or HTML via the doc parameter.
Seo-board Seo-board 1.0
NA
CVE-2023-50854
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly Squirrly SEO - Advanced Pack.This issue affects Squirrly SEO - Advanced Pack: from n/a up to and including 2.3.8.
Squirrly Seo Plugin By Squirrly Seo
7.5
CVSSv2
CVE-2008-6377
PHP remote file inclusion vulnerability in include/global.php in Multi SEO phpBB 1.1.0 allows remote malicious users to execute arbitrary PHP code via a URL in the pfad parameter.
Phpbb-seo Multi Seo Phpbb 1.1.0
1 EDB exploit
NA
CVE-2024-0597
The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to and including 12.3.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with adm...
Squirrly Seo Plugin By Squirrly Seo
NA
CVE-2022-45065
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Squirrly SEO Plugin by Squirrly SEO plugin <= 12.1.20 versions.
Squirrly Seo Plugin By Squirrly Seo
NA
CVE-2022-38140
Auth. (contributor+) Arbitrary File Upload in SEO Plugin by Squirrly SEO plugin <= 12.1.10 on WordPress.
Squirrly Seo Plugin By Squirrly Seo
4.3
CVSSv2
CVE-2021-25019
The SEO Plugin by Squirrly SEO WordPress plugin prior to 11.1.12 does not escape the type parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
Squirrly Seo Plugin By Squirrly Seo
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
command injection
CVE-2021-47511
CVE-2024-26238
CVE-2024-4858
CVE-2024-21305
XXE
CVE-2021-47555
CVE-2021-47526
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
NEXT »