High · 7.1 CVE-2023-45065 EUVD-2023-49386GHSA-c2qp-qqm8-h8cw

WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)

Published Oct 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit plugin <= 1.42 versions.

Vendor	Product	Affected	Fixed
Mad Fish Digital	Bulk NoIndex & NoFollow Toolkit	≤ 1.42	—