CVE-2024-4900

2024-06-2406:15:11

[email protected]

web.nvd.nist.gov

seopress

wordpress

plugin

security

vulnerability

open redirect

attack

cve-2024-4900

post settings

contributor

escape

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post

Affected configurations

Vulners

Node

seopressseopressRange<7.8wordpress

CNA Affected

[
  {
    "vendor": "Unknown",
    "product": "SEOPress ",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThan": "7.8"
      }
    ],
    "defaultStatus": "unaffected"
  }
]