Pagerank Tools Vulnerabilities

[en] The Pagerank Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing nonce validation on the pr_save_settings() function and insufficient input sanitization. This makes it possible for unauthenticated...

Affected:

up to 1.1.5

Fix:

No patched version reported

Disclosed:

Nov 4, 2025

CVE-2025-12416 on NVD →

The Pagerank Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Cross-Site Request Forgery in all versions up to, and including, 1.1.5. This is due to missing nonce validation on the pr_save_settings() function and insufficient input sanitization. This makes it possible for unauthenticated atta...

CVSS:

6.1

Affected:

up to 1.1.5

Fix:

No patched version reported

Disclosed:

Nov 3, 2025

CVE-2025-12416 on NVD →

[en] The Pagerank tools WordPress plugin through 1.1.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Affected:

up to 1.1.5

Fix:

No patched version reported

Disclosed:

Jun 28, 2024

CVE-2024-5730 on NVD →

The Pagerank tools plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfu...

CVSS:

6.1

Affected:

up to 1.1.5

Fix:

No patched version reported

Disclosed:

Jun 7, 2024

CVE-2024-5730 on NVD →