lupsonline

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

lupsonline records in CISA KEV

No lupsonline vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Seo Flow 1 record LOW

Records

2 records

TI-2025-13960 CVE-2025-15285 · GHSA-frv9-vr54-3cwm

SEO Flow by LupsOnline <= 2.2.1 - Unauthenticated Arbitrary Post/Category Modification

LOW 39

The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the checkBlogAuthentication() and checkCategoryAuthentication() functions in all ver…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2026-02-04 No fix listed CWE-862

TI-2025-30516 CVE-2025-48146 · GHSA-6f38-fhvp-wmgg

WordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Michael Lups SEO Flow by LupsOnline lupsonline-link-netwerk allows Stored XSS.This issue affects SEO Flow by LupsOnline: from n/a through <= 2.2.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00137 Published 2025-05-16 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0