Lucene search
WPScanCVELIST:CVE-2024-4900HistoryJun 24, 2024 - 6:00 a.m.
CVE-2024-4900 SEOPress < 7.8 - Contributor+ Open Redirect
2024-06-2406:00:01
WPScan
www.cve.org
6
seopress
wordpress
open redirect
cve-2024-4900
contributor
security
0.0004 Low
EPSS
Percentile
9.1%
The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post
CNA Affected
[
{
"vendor": "Unknown",
"product": "SEOPress ",
"versions": [
{
"status": "affected",
"versionType": "semver",
"version": "0",
"lessThan": "7.8"
}
],
"defaultStatus": "unaffected"
}
]Related
wpexploit
wpexploit
SEOPress < 7.8 - Contributor+ Open Redirect
2024-06-03 00:00:00
wpvulndb
wpvulndb
SEOPress < 7.8 - Contributor+ Open Redirect
2024-06-03 00:00:00
nvd
nvd
CVE-2024-4900
2024-06-24 06:15:11
cve
cve
CVE-2024-4900
2024-06-24 06:15:11
wordfence
wordfence