svil4ok vulnerabilities

Products

• Bottom Bar 1
• Meta Keywords & Description 1

Latest svil4ok CVEs

Newest publication first

1. CVE-2026-6401 Bottom Bar <= 0.1.7 - Cross-Site Request Forgery to Settings Update

   Published 2026-05-20

   Medium·CVSS 4.3 EPSS 0.19%

   The Bottom Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to and including 0.1.7. This is due to missing nonce verification on the plugin's settings update forms handled in bottom-bar-admin.php. None of the three settings forms (main setti...

2. CVE-2025-46454 WordPress Meta Keywords & Description plugin <= 0.8 - Local File Inclusion Vulnerability

   Published 2025-05-23

   High·CVSS 7.5 EPSS 0.69%

   Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in svil4ok Meta Keywords & Description wp-meta-keywords-meta-description allows PHP Local File Inclusion.This issue affects Meta Keywords & Description: from n/a...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.