Lucene search
K

5 matches found

Circl
Circl
added 2023/02/28 4:29 p.m.3 views

CVE-2023-1027

creationtimestamp| type| source ---|---|--- 2023-02-28 16:29:22+00:00| seen| https://t.me/cibsecurity/59095...

4.3CVSS6.2AI score0.00177EPSS
Exploits0References1
OSV
OSV
added 2023/02/28 1:15 p.m.2 views

CVE-2023-1027

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post...

4.3CVSS6.6AI score0.00177EPSS
Exploits0References3
NVD
NVD
added 2023/02/28 1:15 p.m.13 views

CVE-2023-1027

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post...

4.3CVSS4.2AI score0.00177EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2023/02/28 12:54 p.m.9 views

CVE-2023-1027

The WP Meta SEO plugin for WordPress is vulnerable to unauthorized sitemap generation due to a missing capability check on the checkAllCategoryInSitemap function in versions up to, and including, 4.5.3. This makes it possible for authenticated attackers with subscriber-level access to obtain post...

4.3CVSS4.3AI score0.00177EPSS
Exploits0References3
CVE
CVE
added 2023/02/28 12:54 p.m.41 views

CVE-2023-1027

The CVE-2023-1027 issue affects the WP Meta SEO WordPress plugin up to version 4.5.3. Root cause: missing capability check in checkAllCategoryInSitemap, relying on nonce-based access control. Impact: authenticated users with subscriber-level access can generate sitemap data and obtain post catego...

4.3CVSS5.1AI score0.00177EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder