WordPress Plugin Vulnerabilities

Seo by Rank Math <= 1.0.26 - XSS Issues

Description

The changelog file states "Added some important security fixes", and various variables can be found being HTML escaped in the code changes.

Affects Plugins

Plugin icon
seo-by-rank-math
Fixed in 1.0.27

References

URL
https://plugins.trac.wordpress.org/changeset?reponame=&new=2107762%40seo-by-rank-math&old=2101809%40seo-by-rank-math

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
530de2b3-d5eb-43e3-8b62-451726af8ce9

Timeline

Publicly Published
2019-06-18 (about 6 years ago)
Added
2019-06-18 (about 6 years ago)
Last Updated
2020-05-11 (about 6 years ago)

Other

Published
Title
Published
2023-09-12
Title
Jetpack CRM < 5.5.1 - Client+ XSS
Published
2015-01-01
Title
WP Responsive Preview - XSS
Published
2026-01-29
Title
SOHO - Photography WordPress <= 3.0.3 - Unauthenticated Stored Cross-Site Scripting
Published
2023-02-27
Title
Dashboard Widgets Suite < 3.2.2 - Admin+ Stored XSS
Published
2022-04-26
Title
Donate Extra <= 2.02 - Reflected Cross-Site Scripting