CVE-2023-1669

The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Score

CVSS 3.1 7.2 High

Status

Modified - contact@wpscan.com

Published

2023-05-02

Last modified

2025-01-30

Weaknesses

CWE-502

Affected products

• Seopress (Seopress)
• Seopress (Unknown)

References

• https://wpscan.com/vulnerability/fb8791f5-2879-431e-9afc-06d5839e4b9d