{"items":[{"id":"CVE-2026-15660","published":"2026-09-19T02:27:08.505Z","updated":"2026-09-19T14:01:27.582Z","title":"SEO Booster <= 7.4.7 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Modification via handle_oauth_callback()","severity":"MEDIUM","score":4.3,"vendor":"cleverplugins","product":"SEO Booster","kev":false,"epss":0.00336,"kevAdded":null},{"id":"CVE-2026-15458","published":"2026-07-16T03:44:32.477Z","updated":"2026-07-17T14:08:47.143Z","title":"SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'sort_field' Parameter","severity":"MEDIUM","score":4.9,"vendor":"cleverplugins","product":"SEO Booster","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2026-15445","published":"2026-07-16T03:44:31.406Z","updated":"2026-07-16T12:43:50.670Z","title":"SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter","severity":"MEDIUM","score":4.9,"vendor":"cleverplugins","product":"SEO Booster","kev":false,"epss":0.00442,"kevAdded":null},{"id":"CVE-2024-13362","published":"2026-05-01T05:29:54.148Z","updated":"2026-05-01T13:23:26.723Z","title":"Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter","severity":"MEDIUM","score":6.1,"vendor":"sebet","product":"Go Fetch Jobs (for WP Job Manager)","kev":false,"epss":0.00276,"kevAdded":null},{"id":"CVE-2025-68019","published":"2026-01-22T16:52:04.172Z","updated":"2026-04-28T19:55:11.961Z","title":"WordPress SEO Booster plugin <= 6.1.8 - Broken Access Control vulnerability","severity":"MEDIUM","score":6.5,"vendor":"cleverplugins","product":"SEO Booster","kev":false,"epss":0.00393,"kevAdded":null},{"id":"CVE-2025-8009","published":"2025-07-24T07:22:12.991Z","updated":"2025-07-24T13:16:52.588Z","title":"Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read","severity":"MEDIUM","score":4.9,"vendor":"cleverplugins","product":"Security Ninja – WordPress Security Plugin & Firewall","kev":false,"epss":0.00723,"kevAdded":null},{"id":"CVE-2022-4974","published":"2024-10-16T06:43:30.014Z","updated":"2026-04-08T16:46:54.861Z","title":"Freemius SDK <= 2.4.2 - Missing Authorization Checks","severity":"MEDIUM","score":6.3,"vendor":"dashlabsltd","product":"YASR – Yet Another Star Rating Plugin for WordPress","kev":false,"epss":0.00442,"kevAdded":null}]}