Lucene search
HistoryMar 20, 2023 - 4:15 p.m.
CVE-2023-0876
wp meta seo
wordpress plugin
unauthorized ajax actions
low-privilege users
arbitrary redirect vulnerability
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
39.7%
The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.
Affected configurations
Node
joomunitedwp_meta_seoRange<4.5.3wordpress
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joomunited | wp_meta_seo | * | cpe:2.3:a:joomunited:wp_meta_seo:*:*:*:*:*:wordpress:*:* |
Related
openvas
openvas
WordPress WP Meta SEO Plugin < 4.5.3 Open Redirect Vulnerability
2023-05-11 00:00:00
wpvulndb
wpvulndb
cve
cve
CVE-2023-0876
2023-03-20 16:15:12
prion
prion
Spoofing
2023-03-20 16:15:00
cvelist
cvelist
wpexploit
wpexploit
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
39.7%
Related for NVD:CVE-2023-0876