WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
seo-automatic-links
Published
2022-09-05
Title
SEO Smart Links <= 3.0.1 - Admin+ Stored Cross-Site Scripting
Slug
seo-automatic-seo-tools
Published
2025-02-18
Title
SEO Tools <= 4.0.7 - Reflected XSS
Slug
seo-automatic-seo-tools
Published
2025-04-02
Title
SEO Tools <= 4.0.7 - Reflected Cross-Site Scripting
Slug
seo-automatic-wp-core-tweaks
Published
2021-10-21
Title
Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRF
Slug
seo-backlink-monitor
Published
2024-03-25
Title
SEO Backlink Monitor < 1.6.0 - Reflected Cross-Site Scripting
Slug
seo-backlink-monitor
Published
2025-09-22
Title
SEO Backlink Monitor <= 1.6.0 - Cross-Site Request Forgery
Slug
seo-backlink-monitor
Published
2025-09-22
Title
SEO Backlink Monitor <= 1.6.0 - Authenticated (Administrator+) Server-Side Request Forgery
Slug
seo-backlinks
Published
2021-07-28
Title
SEO Backlinks <= 4.0.1 - CSRF to Stored XSS
Slug
seo-beginner-auto-post
Published
2025-01-06
Title
SEO LAT Auto Post <= 2.2.1 - Missing Authorization to File Overwrite/Upload (Remote Code Execution)
Slug
seo-blogger-to-wordpress-301-redirector
Published
2025-01-22
Title
SEO Blogger to WordPress Migration using 301 Redirection <= 0.4.8 - Reflected Cross-Site Scripting
Slug
seo-booster
Published
2021-11-15
Title
SEO Booster < 3.8 - Admin+ SQL Injection
Slug
seo-booster
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
seo-booster
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
seo-booster
Published
2024-04-12
Title
SEO Booster < 3.8.10 - Cross-Site Request Forgery
Slug
seo-booster
Published
2026-01-19
Title
SEO Booster <= 6.1.8 - Missing Authorization
Slug
seo-booster
Published
2026-07-15
Title
SEO Booster < 7.3.2 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
Slug
seo-booster
Published
2026-07-15
Title
SEO Booster < 7.3.2 - Authenticated (Administrator+) SQL Injection via 'sort_field' Parameter
Slug
seo-bulk-editor
Published
2025-01-07
Title
SEO Bulk Editor <= 1.1.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
seo-by-10web
Published
2023-05-10
Title
Seo By 10Web < 1.2.7 - Admin+ Stored XSS
Slug
seo-by-10web
Published
2023-11-07
Title
Seo By 10Web <= 1.2.9 - Reflected XSS
Slug
seo-by-rank-math
Published
2019-06-18
Title
Seo by Rank Math <= 1.0.26 - XSS Issues
Slug
seo-by-rank-math
Published
2019-06-21
Title
Seo By Rank Math <= 1.0.27 - Authenticated Settings Reset
Slug
seo-by-rank-math
Published
2020-03-31
Title
WordPress SEO Plugin - Rank Math < 1.0.41 - Privilege Escalation via Unprotected REST API Endpoint
Slug
seo-by-rank-math
Published
2020-03-31
Title
WordPress SEO Plugin - Rank Math < 1.0.41 - Redirect Creation via Unprotected REST API Endpoint
Slug
seo-by-rank-math
Published
2020-04-18
Title
Rank Math 0.9~1.0.42.1 - Authenticated Missing Access Controls to Disable Competitor Plugins