Vulnerabilities

TI-2025-13960 CVE-2025-15285 · GHSA-frv9-vr54-3cwm

SEO Flow by LupsOnline <= 2.2.1 - Unauthenticated Arbitrary Post/Category Modification

LOW 39

The SEO Flow by LupsOnline plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the checkBlogAuthentication() and checkCategoryAuthentication() functions in all ver…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2026-02-04 No fix listed CWE-862

TI-2025-30516 CVE-2025-48146 · GHSA-6f38-fhvp-wmgg

WordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Michael Lups SEO Flow by LupsOnline lupsonline-link-netwerk allows Stored XSS.This issue affects SEO Flow by LupsOnline: from n/a through <= 2.2.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00137 Published 2025-05-16 No fix listed CWE-352

Vulnerabilities

Filters

SEO Flow by LupsOnline <= 2.2.1 - Unauthenticated Arbitrary Post/Category Modification

WordPress SEO Flow by LupsOnline plugin <= 2.2.1 - CSRF to Stored XSS vulnerability