Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: SEOPress 7.8 Clear all filters
TI-2024-04556 CVE-2024-4900 · GHSA-vjx7-hf5r-chv4

SEOPress < 7.8 - Contributor+ Open Redirect

Priority LOW 27

The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00329 Published 2024-06-24 Fixed in 7.8 CWE-601
TI-2024-04555 CVE-2024-4899 · GHSA-8925-jp4p-j7g9

SEOPress < 7.8 - Contributor+ Stored XSS

Priority LOW 23

The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.0 Network No auth User interaction EPSS 0.00337 Published 2024-06-24 Fixed in 7.8 CWE-79