CVE-2024-5488 SEOPress < 7.9 - Unauthenticated Object Injection

The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present...

CVE-2024-5488 SEOPress < 7.9 - Unauthenticated Object Injection

The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present...

WordPress SEOPress Plugin < 7.9 is vulnerable to PHP Object Injection

Software SEOPress Type Plugin Vulnerable versions 7.9 Fixed in 7.9 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2024-5488 Patch priority High CVSS severity High 8.3 Developer Claim ownership PSID b681d991dcc5 Credits Marc Montpas Required privilege Unauthenticated...