Simple Seo
Approved changes feed: RSS · Atom
cpe:2.3:a:coleds:simple_seo:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Coleds (a08b444a-fc37-5a49-9a04-06a4982242a6) |
|---|---|
| Product | Simple Seo (a5d1421e-edc2-5781-ad3f-55e56e13f058) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-45269 |
vulnerable | 2026-06-08 06:12:42.414648 |
WordPress Simple SEO Plugin <= 2.0.25 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 2.0.25 versions.
Published: 2023-10-13T15:00:17.817Z
Updated: 2026-04-28T16:08:42.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-44627 |
vulnerable | 2026-06-08 05:49:35.903032 |
WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 1.8.12 on WordPress allows attackers to create or delete sitemaps.
Published: 2022-11-03T19:30:57.618Z
Updated: 2026-04-28T16:07:51.347Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36404 |
vulnerable | 2026-06-08 05:46:07.351831 |
WordPress Simple SEO plugin <= 1.8.12 - Broken Access Control vulnerability
MEDIUM (5.4)
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO (WordPress plugin) plugin <= 1.8.12 versions.
Published: 2022-11-03T19:27:39.403Z
Updated: 2026-04-28T16:07:45.939Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-1628 |
vulnerable | 2026-06-08 05:39:13.603937 |
Simple SEO <= 1.7.91 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Simple SEO plugin for WordPress is vulnerable to attribute-based stored Cross-Site Scripting in versions up to, and including 1.7.91, due to insufficient sanitization or escaping on the SEO social and standard title parameters. This can be exploited by authenticated users with Contributor and above permissions to inject arbitrary web scripts into posts/pages that execute whenever an administrator access the page.
Published: 2022-09-06T17:18:55.000Z
Updated: 2025-01-31T18:51:59.157Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.