Ultimate Noindex Nofollow Tool II
Ultimate Noindex Nofollow Tool II has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Ultimate Noindex Nofollow Tool II has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Ultimate Noindex Nofollow Tool II is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.
CVE-2024-1663Ultimate Noindex Nofollow Tool II <= 1.3.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records
Ultimate Noindex Nofollow Tool II
Author
texttheater
Improves your blog’s search engine optimization by “noindexing” pages you choose. Add the noindex robots meta tag to archives, categories, search pages, tags, author pages, login, admin pages or any other page you choose. Add the rel="nofollow" attribute to individual pages listed by the wp_list_pages function or the Pages widget. Also, add the rel="nofollow" attribute to archive links, category links, registration and login links. Written by Jon Kemp, currently maintained by Kilian Evang. Usage After installation, the settings page for this plugin can be found in your WordPress administration interface under Settings → Ultimate noindex.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C