pagup vulnerabilities
10 published CVEs name pagup among the affected products.
- 10Published CVEs10 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2026-0563
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode
pagup · WP Google Street View (with 360° virtual tour) & Google maps + Local SEO
Medium6.4 - CVE-2025-15019
BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
pagup · Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)
Medium6.4 - CVE-2025-62921
WordPress Bulk Auto Image Title Attribute plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability
Pagup · Bulk Auto Image Title Attribute
Medium6.5 - CVE-2025-30799
WordPress WP Google Street View plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability
Pagup · WP Google Street View
Medium5.9 - CVE-2024-13542
WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
pagup · WP Google Street View (with 360° virtual tour) & Google maps + Local SEO
Medium6.4 - CVE-2024-11009
Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter
pagup · Automatic Internal Links for SEO by Pagup
Medium4.9 - CVE-2024-50415
WordPress Ads.txt & App-ads.txt Manager for WordPress plugin <= 1.1.7.1 - Stored Cross Site Scripting (XSS) vulnerability
Pagup · Ads.txt & App-ads.txt Manager for WordPress
Medium5.9 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2023-25706
WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)
Pagup · WordPress Robots.txt optimization
Medium5.4