Skip to content
Pagup vulnerabilities
Newest
-
100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2024-13362
6.1 Medium
-
pagup wp google street view (with 360° virtual tour) & google maps + local seo
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode
CVE-2026-0563
6.4 Medium
-
pagup bulk auto image alt text (alt tag, alt attribute) optimizer (image seo)
BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-15019
6.4 Medium
-
pagup bulk auto image title attribute
WordPress Bulk Auto Image Title Attribute plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2025-62921
6.5 Medium
-
pagup wp google street view
WordPress WP Google Street View plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2025-30799
5.9 Medium
-
agenceseo wp google street view, pagup wp google street view (with 360° virtual tour) & google maps + local seo +1 more
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13542
6.4 Medium
-
pagup automatic internal links for seo by pagup
Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter
CVE-2024-11009
4.9 Medium
-
pagup ads.txt & app-ads.txt manager for wordpress
WordPress Ads.txt & App-ads.txt Manager for WordPress plugin <= 1.1.7.1 - Stored Cross Site Scripting (XSS) vulnerability
CVE-2024-50415
5.9 Medium
-
5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2022-4974
6.3 Medium
-
pagup wordpress robots.txt optimization, better robots.txt +1 more
WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-25706
5.4 Medium