WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
seo-automatic-seo-tools
Published
2025-04-02
Title
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
Slug
seo-automatic-wp-core-tweaks
Published
2021-10-21
Title
Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRF
Slug
seo-backlink-monitor
Published
2024-03-25
Title
SEO Backlink Monitor < 1.6.0 - Reflected Cross-Site Scripting
Slug
seo-backlink-monitor
Published
2025-09-22
Title
SEO Backlink Monitor <= 1.6.0 - Cross-Site Request Forgery
Slug
seo-backlink-monitor
Published
2025-09-22
Title
SEO Backlink Monitor <= 1.6.0 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
seo-backlinks
Published
2021-07-28
Title
SEO Backlinks <= 4.0.1 - CSRF to Stored XSS
Slug
seo-beginner-auto-post
Published
2025-01-06
Title
SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
Slug
seo-blogger-to-wordpress-301-redirector
Published
2025-01-22
Title
SEO Blogger to WordPress Migration using 301 Redirection <= 0.4.8 - Reflected Cross-Site Scripting
Slug
seo-booster
Published
2021-11-15
Title
SEO Booster < 3.8 - Admin+ SQL Injection
Slug
seo-booster
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
seo-booster
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
seo-booster
Published
2024-04-12
Title
SEO Booster < 3.8.10 - Cross-Site Request Forgery
Slug
seo-bulk-editor
Published
2025-01-07
Title
SEO Bulk Editor <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
seo-by-10web
Published
2023-05-10
Title
Seo By 10Web < 1.2.7 - Admin+ Stored XSS
Slug
seo-by-10web
Published
2023-11-07
Title
Seo By 10Web <= 1.2.9 - Reflected XSS
Slug
seo-by-rank-math
Published
2019-06-18
Title
Seo by Rank Math <= 1.0.26 - XSS Issues
Slug
seo-by-rank-math
Published
2019-06-21
Title
Seo By Rank Math <= 1.0.27 - Authenticated Settings Reset
Slug
seo-by-rank-math
Published
2020-03-31
Title
WordPress SEO Plugin - Rank Math < 1.0.41 - Privilege Escalation via Unprotected REST API Endpoint
Slug
seo-by-rank-math
Published
2020-03-31
Title
WordPress SEO Plugin - Rank Math < 1.0.41 - Redirect Creation via Unprotected REST API Endpoint
Slug
seo-by-rank-math
Published
2020-04-18
Title
Rank Math 0.9~1.0.42.1 - Authenticated Missing Access Controls to Disable Competitor Plugins
Slug
seo-by-rank-math
Published
2022-08-12
Title
Rank Math SEO < 1.0.95.1 - Unauthenticated SSRF
Slug
seo-by-rank-math
Published
2023-01-30
Title
Rank Math SEO < 1.0.107.3 - Contributor+ LFI
Slug
seo-by-rank-math
Published
2023-07-17
Title
Rank Math SEO < 1.0.119.1 - Contributor+ Stored XSS
Slug
seo-by-rank-math
Published
2024-03-21
Title
Rank Math SEO with AI SEO Tools < 1.0.215 - Contributor+ Stored XSS
Slug
seo-by-rank-math
Published
2024-04-22
Title
Rank Math SEO with AI SEO Tools < 1.0.217 - Contributor+ Stored Cross-Site Scripting via 'titleWrapper'