4 matches found
CVE-2022-1628
CVE-2022-1628 concerns the Simple SEO plugin for WordPress up to version 1.7.91, where an attribute-based stored cross-site scripting (XSS) flaw exists due to insufficient sanitization/escaping of the SEO social and standard title parameters. This can be exploited by authenticated users with Cont...
CVE-2022-44627
CVE-2022-44627 concerns the WordPress Simple SEO plugin (versions ≤ 1.8.12). The root cause is a Cross-Site Request Forgery (CSRF) vulnerability in the plugin’s sitemap creation/deletion logic, which can allow an attacker to make an authenticated admin create or delete sitemaps. Multiple sources ...
CVE-2022-36404
CVE-2022-36404 affects the WordPress Simple SEO plugin, vulnerable in versions prior to 1.8.13 due to Missing Authorization/Broken Access Control that enables Cross-Site Request Forgery (CSRF) to manipulate sitemaps. Affected component: plugin’s sitemap creation/deletion function. Impact per sour...