Wp Dynamic Keywords Injector Vulnerabilities

The WP Dynamic Keywords Injector plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 2.3.21 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if the...

CVSS:

6.1

Affected:

up to 2.3.21

Fixed in:

2.3.22

Disclosed:

Apr 15, 2024

CVE-2024-32528 on NVD →

The WP Dynamic Keywords Injector plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.15. This is due to missing or incorrect nonce validation on the seerox_wpdki_settings_content function. This makes it possible for unauthenticated attackers to update plugin options v...

CVSS:

5.4

Affected:

up to 2.3.15

Fixed in:

2.3.16

Disclosed:

Feb 20, 2023

CVE-2022-47141 on NVD →