Vulnerabilities

TI-2023-24259 CVE-2023-45269 · GHSA-cmxw-x42r-2hg6

WordPress Simple SEO Plugin <= 2.0.25 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 2.0.25 versions.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00215 Published 2023-10-13 No fix listed CWE-352

TI-2022-21946 CVE-2022-44627 · GHSA-mm3v-9pfv-wfjx

WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 1.8.12 on WordPress allows attackers to create or delete sitemaps.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00313 Published 2022-11-03 No fix listed CWE-352

TI-2022-16741 CVE-2022-36404 · GHSA-phgf-827r-fv8x

WordPress Simple SEO plugin <= 1.8.12 - Broken Access Control vulnerability

LOW 24

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO (WordPress plugin) plugin <= 1.8.12 versions.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00261 Published 2022-11-03 No fix listed CWE-352

TI-2022-01498 CVE-2022-1628 · GHSA-327w-6wfh-xxc5

Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting

LOW 29

The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00626 Published 2022-09-06 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Simple SEO Plugin <= 2.0.25 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability

WordPress Simple SEO plugin <= 1.8.12 - Broken Access Control vulnerability

Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting