Seopress (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-07-09. Vendor: Unknown.

CVEs of Seopress

• CVE-2024-5488 - CVSS 9.8 (critical), 2024-07-09: The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can…
• CVE-2024-4899 - CVSS 5 (medium), 2024-06-24: The SEOPress WordPress plugin before 7.8 does not sanitise and escape some of its Post settings, which could allow high privilege users such as contributor to…
• CVE-2024-4900 - CVSS 6.1 (medium), 2024-06-24: The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open…
• CVE-2023-6290 - CVSS 4.8 (medium), 2024-01-22: The SEOPress WordPress plugin before 7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform…
• CVE-2023-1669 - CVSS 7.2 (high), 2023-05-02: The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to…