Browse CVEs

HIGH 8.8 CVE-2024-50455 Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Seopress 8.2+ Fix from $1,9502024-10-29 HIGH 8.8 CVE-2024-50456 Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security Levels.Th… Seopress after 8.2 Fix from $1,9502024-10-29 MEDIUM 6.1 CVE-2024-9225 The SEOPress – On-site SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg wi… Seopress 8.2+ Fix from $1,6002024-10-02 CRITICAL 9.8 CVE-2024-5488 The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnera… Seopress 7.9+ Fix from $2,3002024-07-09 MEDIUM 6.1 CVE-2024-4900 The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perf… Seopress 7.8+ Fix from $1,6002024-06-24 MEDIUM 5.0 CVE-2024-4899 The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as cont… Seopress 7.8+ Fix from $1,6002024-06-24 MEDIUM 5.4 CVE-2024-1168 The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's social image URL in all versions up to,… Seopress after 7.9 Fix from $1,6002024-06-20 MEDIUM 5.4 CVE-2024-1134 The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SEO title and description parameters as well as … Seopress 7.6+ Fix from $1,6002024-05-24 MEDIUM 5.4 CVE-2024-2165 The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt parameter in all versions up to, and i… Seopress 7.6+ Fix from $1,6002024-04-09 HIGH 7.2 CVE-2023-1669EPSS 18% The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin … Seopress 6.5.0.3+ Fix from $1,9502023-05-02 MEDIUM 5.4 CVE-2021-34641 The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the ~/src/Actions/Api/TitleDescriptio… Seopress 5.0.4+ Fix from $1,6002021-08-16