7.2
Élevée
CVE-2023-1669 The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow…
Description
The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| SEOPress 6.5 | premières → < 6.5.0.3 | 6.5.0.3 |
Autres CVE de SEOPress
Les 6 CVE de SEOPress →
CVE-2026-108041
SEOPress < 10.4 - Authenticated Stored XSS via Analytics Tracking Settings
7.1
Élevée
CVE-2024-5488
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with…
9.8
Critique
CVE-2024-4899
The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high…
5.0
Moyenne
CVE-2024-4900
The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow…
6.1
Moyenne