Lucene search

K
wpvulndbWpvulndbWPVDB-ID:6B3A9BF8-D895-475D-A76F-0E609978E11E
HistoryFeb 24, 2023 - 12:00 a.m.

WP Meta SEO < 4.5.4 - Subscriber+ SiteMap Settings Update

2023-02-2400:00:00
wpscan.com
7
plugin
authorisation
sitemaps
settings
update
authenticated users
subscriber

EPSS

0.001

Percentile

29.7%

The plugin does not have authorisation check when updating its SiteMaps settings, which could allow any authenticated users, such as subscriber to update them

EPSS

0.001

Percentile

29.7%

Related for WPVDB-ID:6B3A9BF8-D895-475D-A76F-0E609978E11E