Approved changes feed: RSS · Atom

cpe:2.3:a:madfishdigital:bulk_noindex_&_nofollow_toolkit:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMadfishdigital (43efcb71-883b-5196-9605-08389b1a7c8c)
ProductBulk Noindex & Nofollow Toolkit (6a953edc-1ea9-537b-9351-bb56cab7c28e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-31537 vulnerable 2026-06-08 07:18:58.108259 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 2.16 - Reflected Cross Site Scripting (XSS) vulnerability
HIGH (7.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madfishdigital Bulk NoIndex & NoFollow Toolkit bulk-noindex-nofollow-toolkit-by-mad-fish allows Reflected XSS.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through <= 2.16.
Published: 2025-04-01T20:58:11.858Z
Updated: 2026-04-28T16:12:08.623Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-8803 vulnerable 2026-06-08 07:00:25.765029 Bulk NoIndex & NoFollow Toolkit <= 2.15 - Reflected Cross-Site Scripting
MEDIUM (6.1)
The Bulk NoIndex & NoFollow Toolkit plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 2.15. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Published: 2024-09-26T02:03:25.623Z
Updated: 2026-04-08T17:26:27.536Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41688 vulnerable 2026-06-08 06:11:06.454003 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5.
Published: 2024-12-13T14:24:13.720Z
Updated: 2026-04-28T16:08:38.242Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.