KeyWord Collector vulnerabilities
We track 1 vulnerability in KeyWord Collector products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 11, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest KeyWord Collector vulnerabilities
- 8.8 High severity
KeyWord Collector: Improper Neutralization of Input During Web Page Generation
The KeyWord Collector WordPress plugin through 1.4 does not have any authorisation or nonce check when saving its settings, and does not escape them before output, allowing unauthenticated attackers to store malicious JavaScript that executes when an administr