The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post
CVSS
No CVSS.
References
Link | Resource |
---|---|
https://wpscan.com/vulnerability/a56ad272-e2ed-4064-9b5d-114a834dd8b3/ | Exploit Third Party Advisory |
https://wpscan.com/vulnerability/a56ad272-e2ed-4064-9b5d-114a834dd8b3/ | Exploit Third Party Advisory |
Configurations
History
19 May 2025, 21:04
Type | Values Removed | Values Added |
---|---|---|
First Time |
Seopress seopress
Seopress |
|
CPE | cpe:2.3:a:seopress:seopress:*:*:*:*:*:wordpress:*:* | |
CWE | CWE-601 | |
References | () https://wpscan.com/vulnerability/a56ad272-e2ed-4064-9b5d-114a834dd8b3/ - Exploit, Third Party Advisory |
24 Jun 2024, 06:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-06-24 06:15
Updated : 2025-05-19 21:04
NVD link : CVE-2024-4900
Mitre link : CVE-2024-4900
JSON object : View
Products Affected
seopress
- seopress
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')