Vulnerabilities

TI-2025-20940 CVE-2025-28997 · GHSA-8437-r9r7-pr3c

WordPress WP AutoKeyword plugin <= 1.0 - Broken Access Control Vulnerability

LOW 30

Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP AutoKeyword: from n/a through <= 1…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00334 Published 2025-06-06 No fix listed CWE-862

TI-2025-23647 CVE-2025-32582 · GHSA-vffm-x88v-8g8q

WordPress WP AutoKeyword Plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows Stored XSS.This issue affects WP AutoKeyword: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00311 Published 2025-04-17 No fix listed CWE-79

TI-2025-22742 CVE-2025-31579 · GHSA-cfw2-8644-vppr

WordPress WP AutoKeyword plugin <= 1.0 - SQL Injection vulnerability

MEDIUM 47

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EXEIdeas International WP AutoKeyword wp-autokeyword allows SQL Injection.This issue affects WP AutoKeyword: from n/a…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00532 Published 2025-04-01 No fix listed CWE-89

TI-2025-23007 CVE-2025-31870 · GHSA-hh57-6jp9-f58c

WordPress WP AutoKeyword plugin <= 1.0 - Arbitrary Content Deletion vulnerability

LOW 24