WordPress Plugin Vulnerabilities

DELUCKS SEO <= 2.1.7 - Unauthenticated Options Update

Description

This vulnerability was seen actively exploited in the wild on and around September 22nd 2019.

Affects Plugins

Plugin icon
delucks-seo
Fixed in 2.1.8

References

CVE
CVE-2019-25146
URL
https://blog.nintechnet.com/vulnerability-in-the-wordpress-delucks-seo-plugin-actively-exploited/
URL
https://plugins.trac.wordpress.org/changeset/2161211/delucks-seo

Miscellaneous

Verified
No
WPVDB ID
b4ca281a-1e41-4987-a60e-c11019069272

Timeline

Publicly Published
2019-09-21 (about 6 years ago)
Added
2019-09-24 (about 6 years ago)
Last Updated
2023-06-08 (about 2 years ago)

Other

Published
Title
Published
2021-06-07
Title
Comments Like Dislike < 1.1.4 - Add Like/Dislike Bypass
Published
2019-09-24
Title
Rich Reviews < 1.8.0 - Unauthenticated Plugin Options Update
Published
2023-10-30
Title
EventPrime < 3.3.6 - Booking Pricing Bypass
Published
2024-01-17
Title
Getwid – Gutenberg Blocks < 2.0.5 - Captcha Bypass
Published
2025-01-21
Title
AdForest < 5.1.9 - Authentication Bypass