Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: seometricsplugin Clear all filters
TI-2025-06135 CVE-2025-6754 · GHSA-86r7-7qgg-4qfx

SEO Metrics <= 1.0.15 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

Priority MEDIUM 41

The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both the seo_metrics_handle_connect_button_click() AJAX handler and the seo_metrics_handle_custom_endpoint…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00479 Published 2025-08-02 No fix listed CWE-862