Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:seopress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | Seopress (82a1b2c4-9787-597b-81b7-c4a0b11ab793) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5488 |
vulnerable | 2026-06-08 06:56:16.162524 |
SEOPress < 7.9 - Unauthenticated Object Injection
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present.
Published: 2024-07-09T06:00:04.275Z
Updated: 2024-08-01T21:11:12.790Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4900 |
vulnerable | 2026-06-08 06:50:18.993440 |
SEOPress < 7.8 - Contributor+ Open Redirect
The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post
Published: 2024-06-24T06:00:01.863Z
Updated: 2024-12-04T21:01:49.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4899 |
vulnerable | 2026-06-08 06:50:18.992019 |
SEOPress < 7.8 - Contributor+ Stored XSS
The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.
Published: 2024-06-24T06:00:01.586Z
Updated: 2024-08-01T20:55:10.228Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6290 |
vulnerable | 2026-06-08 06:19:46.862921 |
WP SEO Press < 7.3 - Admin+ Stored XSS
The SEOPress WordPress plugin before 7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Published: 2024-01-22T19:14:26.723Z
Updated: 2024-08-29T14:31:11.952Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1669 |
vulnerable | 2026-06-08 05:52:36.489579 |
SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.
Published: 2023-05-02T07:04:55.190Z
Updated: 2025-01-30T14:42:20.073Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.