CVE-2024-50456

概要

参考情報

• patchstack.com/database/Wordpress/Plugin/wp-seopress/vulnerability/wordpress-seopress-plugin-8-1-1-broken-access-control-vulnerability-2

seopress のその他の脆弱性

• CVE-2024-50455高 8.8Missing Authorization vulnerability in Benjamin Denis SEOPress wp-seopress allows Exploiting Incorrectly Configured Access Control Security …
• CVE-2024-9225中 6.1The SEOPress – On-site SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_que…
• CVE-2024-5488緊急 9.8The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injectio…
• CVE-2024-4900中 6.1The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above rol…
• CVE-2024-4899中 5.0The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users suc…