Pagup vulnerabilities
10 vulnerabilities
Known vulnerabilities in Pagup products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 17 products.
Products
17- Automatic Internal Links For SEO By Pagup3 vulnerabilities
- Bulk Auto Image Alt Text (Alt Tag, Alt Attribute) Optimizer (Image SEO)3 vulnerabilities
- WP Google Street View (With 360° Virtual Tour) & Google Maps + Local SEO3 vulnerabilities
- Ads.Txt & App Ads.Txt Manager For Wordpress2 vulnerabilities
- Add Linkedin Insight Tags For Linkedin Ads1 vulnerabilities
- Add Pinterest Conversion Tags For Pinterest Ads + Site Verification1 vulnerabilities
- Add Tiktok Pixel For Tiktok Ads (+Woocommerce)1 vulnerabilities
- Add Twitter Pixel For Twitter Ads1 vulnerabilities
- Auto SEO META Keywords (Meta Tags Keywords) Optimization + Woocommerce1 vulnerabilities
- Better Robots.Txt1 vulnerabilities
- Better Robots.Txt – AI Ready Crawl Control & Bot Governance1 vulnerabilities
- Bulk Auto Image Title Attribute1 vulnerabilities
- Bulk Auto Image Title Attribute (Image Title Tag) Optimizer (Image SEO)1 vulnerabilities
- Mobilook — Mobile View & Mobile‑Friendly Test1 vulnerabilities
- Vidseo – Video Transcript Embedding For Wordpress & LLM1 vulnerabilities
- Wordpress Robots.Txt Optimization1 vulnerabilities
- WP Google Street View1 vulnerabilities
CVE-2025-62921pagupbulk auto image title attribute+1
EPSS score0.20%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Bulk Auto Image Title Attribute bulk-image-title-attribute allows DOM-Based XSS.This issue affects Bulk Auto Image Title Attribute: from n/a through <= 2.0.1.CVE-2025-15019pagupbulk auto image alt text (alt tag, alt attribute) optimizer (image seo)+1EPSS score0.21%
The BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bialty_cs_alt' post meta in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever an administrator accesses the post editor.CVE-2025-30799pagupwp google street view+1EPSS score0.35%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup WP Google Street View wp-google-street-view allows Stored XSS.This issue affects WP Google Street View: from n/a through <= 1.1.5.CVE-2022-49745starpluginseasy_age_verify+1239EPSS score0.44%
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.CVE-2024-13362100pluginsopen_user_map+262EPSS score0.28%
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.CVE-2024-13542agenceseowp_google_street_view+2EPSS score0.24%
The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpgsv' shortcode in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2024-11009pagupautomatic internal links for seo by pagup+1EPSS score0.44%
The Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) plugin for WordPress is vulnerable to time-based SQL Injection via the ‘post_id’ parameter in all versions up to, and including, 1.2.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2024-50415pagupads.txt & app-ads.txt manager for wordpress+1EPSS score0.27%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pagup Ads.txt & App-ads.txt Manager for WordPress app-ads-txt allows Stored XSS.This issue affects Ads.txt & App-ads.txt Manager for WordPress: from n/a through <= 1.1.7.1.CVE-2026-0563pagupwp google street view (with 360° virtual tour) & google maps + local seo+1EPSS score0.22%
The WP Google Street View (with 360° virtual tour) & Google maps + Local SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpgsv_map' shortcode in all versions up to, and including, 1.1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.CVE-2023-25706pagupbetter_robots.txt+2EPSS score0.22%
Cross-Site Request Forgery (CSRF) vulnerability in Pagup WordPress Robots.Txt optimization plugin <= 1.4.5 versions.