Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

pagup vulnerabilities

10 published CVEs name pagup among the affected products.

Published CVEs
10
Last 12 months
3
Critical
0
Known exploited
0

Critical 0High 0Medium 10Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20231
  2. 20243
  3. 20253
  4. 20263

Newest CVEs

  • CVE-2024-13362

    Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

    sebet · Go Fetch Jobs (for WP Job Manager)

    Medium6.1
  • CVE-2026-0563

    WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpgsv_map' Shortcode

    pagup · WP Google Street View (with 360° virtual tour) & Google maps + Local SEO

    Medium6.4
  • CVE-2025-15019

    BIALTY - Bulk Image Alt Text (Alt tag, Alt Attribute) with Yoast SEO + WooCommerce <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    pagup · Bulk Auto Image Alt Text (Alt tag, Alt attribute) optimizer (image SEO)

    Medium6.4
  • CVE-2025-62921

    WordPress Bulk Auto Image Title Attribute plugin <= 2.0.1 - Cross Site Scripting (XSS) vulnerability

    Pagup · Bulk Auto Image Title Attribute

    Medium6.5
  • CVE-2025-30799

    WordPress WP Google Street View plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

    Pagup · WP Google Street View

    Medium5.9
  • CVE-2024-13542

    WP Google Street View (with 360° virtual tour) & Google maps + Local SEO <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    pagup · WP Google Street View (with 360° virtual tour) & Google maps + Local SEO

    Medium6.4
  • CVE-2024-11009

    Internal Linking for SEO traffic & Ranking – Auto internal links (100% automatic) <= 1.2.1 - Authenticated (Administrator+) SQL Injection via post_id Parameter

    pagup · Automatic Internal Links for SEO by Pagup

    Medium4.9
  • CVE-2024-50415

    WordPress Ads.txt & App-ads.txt Manager for WordPress plugin <= 1.1.7.1 - Stored Cross Site Scripting (XSS) vulnerability

    Pagup · Ads.txt & App-ads.txt Manager for WordPress

    Medium5.9
  • CVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

    Medium6.3
  • CVE-2023-25706

    WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Pagup · WordPress Robots.txt optimization

    Medium5.4