2 matches found
CVE-2021-24307: Deserialization of Untrusted Data
The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseotoolssettings" privilege most of the time admin to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup...
9CVSS6.6AI score0.53274EPSS
SaveExploits3References3
PT-2021-15844
Name of the Vulnerable Software and Affected Versions The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings versions prior to 4.1.0.2 Description The issue allows authenticated users with aioseo tools settings privilege, typically admins, to execute arbitrary code on t...
9CVSS0.53274EPSS
SaveExploits3References10
20