Seopress

12 CVEs across 1 Seopress products. Browse Seopress vulnerabilities, severities, and proof-of-concept exploits.

Seopress products with known CVEs

ProductCVEs
Seopress12
Seopress CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-50456Medium5.42024-10-29Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…
CVE-2024-50455Medium4.32024-10-29Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue a…
CVE-2024-9225Medium6.12024-10-02The SEOPress – On-site SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appr…
CVE-2024-5488Critical9.82024-07-09The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can…
CVE-2024-4900Medium6.12024-06-24The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open r…
CVE-2024-4899Medium5.02024-06-24The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to…
CVE-2024-1168Medium6.42024-06-20The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's social image URL in all versions up to, and inclu…
CVE-2024-1134Medium6.42024-05-24The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SEO title and description parameters as well as others in…
CVE-2024-2165Medium6.42024-04-09The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt parameter in all versions up to, and including…
CVE-2023-6290Medium4.82024-01-22The SEOPress WordPress plugin before 7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cro…
CVE-2023-1669High7.22023-05-02The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform…
CVE-2021-34641Medium6.42021-08-16The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the ~/src/Actions/Api/TitleDescriptionMeta.php…