Vulnerabilities > Madfishdigital

DATE CVE VULNERABILITY TITLE RISK
2024-09-26 CVE-2024-8803 Cross-site Scripting vulnerability in Madfishdigital Bulk Noindex & Nofollow Toolkit
The Bulk NoIndex & NoFollow Toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.15.
network
low complexity
madfishdigital CWE-79
6.1
2023-10-18 CVE-2023-45065 Unspecified vulnerability in Madfishdigital Bulk Noindex & Nofollow Toolkit
Unauth.
network
low complexity
madfishdigital
6.1