WordPress plugin
Bulk NoIndex & NoFollow Toolkit security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 5 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium5
- Low0
All Bulk NoIndex & NoFollow Toolkit vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.1 | Reflected Cross-Site Scripting ≤2.16Update to 2.20 | CVE-2025-31537 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤2.15Update to 2.16 | CVE-2024-8803 | |
| Medium6.1 | Reflected Cross-Site Scripting via tab, order, and orderby ≤2.01Update to 2.10 | CVE-2024-29791 | |
| Medium6.1 | Reflected Cross-Site Scripting via 's' <1.5Update to 1.5 | CVE-2023-45065 | |
| Medium4.3 | Missing Authorization ≤1.5Update to 1.51 | CVE-2023-41688 |
- Medium6.1Reflected Cross-Site Scripting
≤2.16Update to 2.20
- Medium6.1Reflected Cross-Site Scripting
≤2.15Update to 2.16
- Medium6.1Reflected Cross-Site Scripting via tab, order, and orderby
≤2.01Update to 2.10
- Medium6.1Reflected Cross-Site Scripting via 's'
<1.5Update to 1.5
- Medium4.3Missing Authorization
≤1.5Update to 1.51
Bulk NoIndex & NoFollow Toolkit: common questions
Does Bulk NoIndex & NoFollow Toolkit have known vulnerabilities?
Yes. VulnCrest Radar lists 5 known vulnerabilities in Bulk NoIndex & NoFollow Toolkit: 5 medium. None are known to affect version null.
How do I check which version of Bulk NoIndex & NoFollow Toolkit I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Bulk NoIndex & NoFollow Toolkit vulnerability?
CVE-2025-31537, published Apr 1, 2025: Bulk NoIndex & NoFollow Toolkit <= 2.16 - Reflected Cross-Site Scripting. Severity: Medium (CVSS 6.1).
Is any Bulk NoIndex & NoFollow Toolkit vulnerability listed in CISA KEV?
No. None of the known Bulk NoIndex & NoFollow Toolkit vulnerabilities is currently listed in the CISA KEV catalog.