Vulnerabilities and security researches forwp-autokeyword wp-autokeyword

Apr 18, 2025

CVE, Research URL: CVE-2025-32582
Home page URL: Security reports for WP AutoKeyword
Application: WP AutoKeyword
Date: Apr 17, 2025
Research Description: WP AutoKeyword [wp-autokeyword] <= 1.0 (unfixed) CVE-2025-32582 [en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EXEIdeas International WP AutoKeyword allows Stored XSS. This issue affects WP AutoKeyword: from n/a through 1.0.
Affected versions: Min -, max -.
Status: vulnerable

Apr 03, 2025

CVE, Research URL: CVE-2025-31579
Home page URL: Security reports for WP AutoKeyword
Application: WP AutoKeyword
Date: Apr 02, 2025
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EXEIdeas International WP AutoKeyword allows SQL Injection. This issue affects WP AutoKeyword: from n/a through 1.0.
Affected versions: Min -, max -.
Status: vulnerable

CVE, Research URL: CVE-2025-31870
Home page URL: Security reports for WP AutoKeyword
Application: WP AutoKeyword
Date: Apr 01, 2025
Research Description: Missing Authorization vulnerability in EXEIdeas International WP AutoKeyword allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP AutoKeyword: from n/a through 1.0.
Affected versions: Min -, max -.
Status: vulnerable