cleantalk
Vulnerabilities and Security Researches

SEO Flow by LupsOnline, CVE-2025-48146

CVE, Research URL

CVE-2025-48146

Home page URL

Security reports for SEO Flow by LupsOnline

Application

SEO Flow by LupsOnline

Published on
May 16, 2025
Research Description
Cross-Site Request Forgery (CSRF) vulnerability in Michael Lups SEO Flow by LupsOnline allows Stored XSS. This issue affects SEO Flow by LupsOnline: from n/a through 2.2.0.
Affected versions
Min -, max 2.2.0.
Status
vulnerable
Previous vulnerability researches
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2024-43220) , Aug 13, 2024
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2024-6130) , Jul 02, 2024
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2024-10558) , Mar 26, 2025
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2024-8633) , Sep 28, 2024
Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder (CVE-2024-13053) , May 17, 2025
New vulnerability
Wise Chat (CVE-2024-13613) , May 18, 2025
WP Booking Calendar (CVE-2025-4669) , May 18, 2025
WooCommerce POS (CVE-2025-48117) , May 18, 2025
BERTHA AI. Your AI co-pilot for WordPress and Chrome (CVE-2025-48138) , May 18, 2025
SEO Flow by LupsOnline (CVE-2025-48146) , May 18, 2025