CVE-2021-34641

概要

参考情報

• plugins.trac.wordpress.org/browser/wp-seopress/tags/5.0.4/src/Actions/Api/TitleDescriptionMeta.php · Exploit
• wordfence.com/blog/2021/08/xss-vulnerability-patched-in-seopress-affects-100000-sites · Exploit

seopress のその他の脆弱性

• CVE-2024-50456高 8.8Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security …
• CVE-2024-50455高 8.8Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security …
• CVE-2024-9225中 6.1The SEOPress – On-site SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_que…
• CVE-2024-5488緊急 9.8The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injectio…
• CVE-2024-4900中 6.1The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above rol…