plugin

Link Juice Keeper Vulnerabilities

3 known security issues reported for the Link Juice Keeper WordPress plugin. Most recent disclosed Apr 25, 2023.

1 medium

Running Link Juice Keeper on your site? Check whether your installed version is affected.

Scan your site free

Link Juice Keeper [link-juice-keeper] < 2.0.3

unknown

[en] Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in George Pattihis Link Juice Keeper plugin <= 2.0.2 versions.

Affected:
up to 2.0.3
Fixed in:
2.0.3
Disclosed:
Apr 25, 2023

CVE-2023-25793 on NVD →

Link Juice Keeper <= 2.0.2 - Authenticated(Admin+) Stored Cross-Site Scripting

medium

The Link Juice Keeper plugin for WordPress is vulnerable to stored cross-site scripting in versions up to, and including, 2.0.2 via the 'redirect_link' and 'notify_to' options due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level capabilities to inject...

CVSS:
5.5
Affected:
up to 2.0.2
Fixed in:
2.0.3
Disclosed:
Feb 10, 2023

CVE-2023-25793 on NVD →

Link Juice Keeper [link-juice-keeper] < 2.0.3

unknown

The Link Juice Keeper plugin for WordPress is vulnerable to stored cross-site scripting in versions up to, and including, 2.0.2 via the 'redirect_link' and 'notify_to' options due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level capabilities to inject...

Affected:
up to 2.0.3
Fixed in:
2.0.3
Disclosed:
Feb 10, 2023

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database