Approved changes feed: RSS · Atom

cpe:2.3:a:seopanel:seo_panel:4.10.0:*:*:*:*:*:*:*

part: a version: 4.10.0 update: *

VendorSeopanel (70a1b220-14e2-5a08-8223-16600ada7bc0)
ProductSeo Panel (91a9b3d7-cef6-5715-8988-0086f5ff6d31)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/seopanel/seo-panel purl2cpe 2026-06-01 10:11:40.207987
pkg:sourceforge/seopanel purl2cpe 2026-06-01 10:11:40.207989

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-22648 vulnerable 2026-06-08 06:29:35.965676 Details available
A Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attackers to scan ports in the local environment.
Published: 2024-01-30T00:00:00.000Z
Updated: 2025-06-20T19:53:14.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22647 vulnerable 2026-06-08 06:29:35.965168 Details available
An user enumeration vulnerability was found in SEO Panel 4.10.0. This issue occurs during user authentication, where a difference in error messages could allow an attacker to determine if a username is valid or not, enabling a brute-force attack with valid usernames.
Published: 2024-01-30T00:00:00.000Z
Updated: 2025-05-29T15:06:59.784Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22646 vulnerable 2026-06-08 06:29:35.964698 Details available
An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system.
Published: 2024-01-30T00:00:00.000Z
Updated: 2025-06-04T21:10:47.143Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22643 vulnerable 2026-06-08 06:29:35.963927 Details available
A Cross-Site Request Forgery (CSRF) vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets.
Published: 2024-01-30T00:00:00.000Z
Updated: 2025-05-30T19:28:40.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-47872 vulnerable 2026-06-08 05:38:07.823113 SEO Panel < 4.9.0 - 'order_col' Blind SQL Injection
HIGH (7.1)
SEO Panel versions prior to 4.9.0 contain a blind SQL injection vulnerability in the archive.php page that allows authenticated attackers to manipulate database queries through the 'order_col' parameter. Attackers can use sqlmap to exploit the vulnerability and extract database information by injecting malicious SQL code into the order column parameter.
Published: 2026-01-21T17:27:47.681Z
Updated: 2026-04-07T14:06:23.860Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.