Cleverplugins

10 CVEs across 5 Cleverplugins products. Browse Cleverplugins vulnerabilities, severities, and proof-of-concept exploits.

Cleverplugins products with known CVEs

ProductCVEs
Seo Booster5
Security Ninja – WordPress Security & Firewall2
Seo Booster2
Delete Duplicate Posts1
Security Ninja – WordPress Security Plugin & Firewall1
Cleverplugins CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-15660Medium4.32026-09-19The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. This is due to a missing capability check…
CVE-2026-15458Medium4.92026-07-16The SEO Booster plugin for WordPress is vulnerable to generic SQL Injection via the 'sort_field' parameter in all versions up to, and including, 7.3.1 due to i…
CVE-2026-15445Medium4.92026-07-16The SEO Booster plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.3.1 due to i…
CVE-2024-13362Medium6.12026-05-01Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient inp…
CVE-2025-68019Medium6.52026-01-22Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…
CVE-2025-8009Medium4.92025-07-24The Security Ninja – WordPress Security Plugin & Firewall plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 5.242…
CVE-2022-4974Medium6.32024-10-16The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-32438Medium4.32024-04-15Cross-Site Request Forgery (CSRF) vulnerability in cleverplugins.Com SEO Booster.This issue affects SEO Booster: from n/a through 3.8.9.
CVE-2023-47754Medium4.32023-12-19Missing Authorization vulnerability in Clever plugins Delete Duplicate Posts allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects…
CVE-2021-24747High7.22021-12-13The SEO Booster WordPress plugin before 3.8 allows for authenticated SQL injection via the "fn_my_ajaxified_dataloader_ajax" AJAX request as the $_REQUEST['ord…