pagup

9 results · Clear filters · Feed

• Medium 6.1
  CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject …

  bPlugins webfactory unitecms nicheaddons Web / CMS
  May 1, 2026
• Medium 6.4
  CVE-2026-0563

  WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode

  The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpgsv_map' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and…

  pagup WP Google Street View (with 360° virtual tour) & Google maps + Local SEO Web / CMS
  Jan 9, 2026
• Medium 6.4
  CVE-2025-15019

  BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bialty_cs_alt' post meta in all versions up to, and including, 2.2.1 due to insufficient input sa…

  pagup Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO) Web / CMS
  Jan 9, 2026
• Medium 6.5
  CVE-2025-62921

  WordPress Bulk Auto Image Title Attribute plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Bulk Auto Image Title Attribute bulk-image-title-attribute allows DOM-Based XSS.This issue affects Bulk Auto Image Title Attribute: from n/a through <=…

  pagup Bulk Auto Image Title Attribute
  Oct 27, 2025
• Medium 5.9
  CVE-2025-30799

  WordPress WP Google Street View plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup WP Google Street View wp-google-street-view allows Stored XSS.This issue affects WP Google Street View: from n/a through <= 1.1.5.

  pagup WP Google Street View
  Mar 27, 2025
• Medium 6.4
  CVE-2024-13542

  WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpgsv' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitizatio…

  pagup WP Google Street View (with 360° virtual tour) & Google maps + Local SEO Web / CMS
  Jan 24, 2025
• Medium 4.9
  CVE-2024-11009

  Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter

  The Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 1.2.1 due to insufficient escaping on the us…

  pagup Automatic Internal Links for SEO by Pagup Web / CMS
  Nov 27, 2024
• Medium 5.9
  CVE-2024-50415

  WordPress Ads.txt & App-ads.txt Manager for WordPress plugin <= 1.1.7.1 - Stored Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Ads.txt & App-ads.txt Manager for WordPress app-ads-txt allows Stored XSS.This issue affects Ads.txt & App-ads.txt Manager for WordPress: from n/a thro…

  pagup Ads.txt & App-ads.txt Manager for WordPress Web / CMS
  Oct 29, 2024
• Medium 5.4
  CVE-2023-25706

  WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in Pagup WordPress Robots.Txt optimization plugin <= 1.4.5 versions.

  pagup WordPress Robots.txt optimization Web / CMS
  Jul 11, 2023