6.1
Medium
CVE-2023-0876 The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to…
Description
The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Meta SEO 4.5 | earliest → < 4.5.3 | 4.5.3 |
Other CVEs of WP Meta SEO
The 4 CVEs of WP Meta SEO →
CVE-2023-1381
The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the…
8.8
High
CVE-2023-0875
The WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, leading…
8.8
High
CVE-2022-1093
The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting…
Not rated