WP Meta SEO

Vulnerabilities

• CVE-2026-9643

  WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging

  High 7.2

• CVE-2026-11370

  WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter

  Medium 6.4

• CVE-2023-6961

  WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header

  Medium 6.1

• CVE-2024-45456

  WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability

  Medium 5.4

• CVE-2023-6962

  WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description

  Medium 5.3

• CVE-2024-45455

  WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability

  Medium 4.8

• CVE-2023-1028

  WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore'

  Medium 4.3

• CVE-2023-1027

  WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap'

  Medium 4.3

• CVE-2023-1026

  WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'

  Medium 4.3

• CVE-2023-1024

  WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps'

  Medium 4.3

• CVE-2023-1023

  WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'

  Medium 4.3

• CVE-2023-1022

  WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation'

  Medium 4.3

• CVE-2023-1029

  WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'

  Medium 4.3

• CVE-2022-30337

  WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability

  Medium 4.3