The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2023-03-20T15:52:08.281Z

Updated: 2024-08-02T05:24:34.637Z

Reserved: 2023-02-16T22:50:25.786Z

Link: CVE-2023-0876

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-03-20T16:15:12.653

Modified: 2024-11-21T07:38:01.187

Link: CVE-2023-0876

cve-icon Redhat

No data.