CVE-2026-15458
- EPSS 0.27%
- Veröffentlicht 16.07.2026 03:44:32
- Zuletzt bearbeitet 17.07.2026 15:16:46
The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_field' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2026-15445
- EPSS 0.27%
- Veröffentlicht 16.07.2026 03:44:31
- Zuletzt bearbeitet 16.07.2026 13:38:53
The SEO Booster plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.3.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...
CVE-2025-68019
- EPSS 0.35%
- Veröffentlicht 22.01.2026 16:52:04
- Zuletzt bearbeitet 15.04.2026 00:35:42
Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Booster: from n/a through <= 6.1.8.
CVE-2024-32438
- EPSS 0.24%
- Veröffentlicht 15.04.2024 08:15:15
- Zuletzt bearbeitet 28.04.2026 19:24:38
Cross-Site Request Forgery (CSRF) vulnerability in cleverplugins.Com SEO Booster.This issue affects SEO Booster: from n/a through 3.8.9.
CVE-2021-24747
- EPSS 1.5%
- Veröffentlicht 13.12.2021 11:15:08
- Zuletzt bearbeitet 21.11.2024 05:53:41
The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_ajax" AJAX request as the $_REQUEST['order'][0]['dir'] parameter is not properly escaped leading to blind and error-based SQL injec...