WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-30337

5.4MEDIUM

Key Information:

Vendor: Wordpress
Status: WP Meta Seo (WordPress Plugin)
Vendor: CVE Published:; 28 June 2022

Summary

Cross-Site Request Forgery (CSRF) vulnerability in JoomUnited WP Meta SEO plugin <= 4.4.8 at WordPress allows an attacker to update the social settings.

Affected Version(s)

WP Meta SEO (WordPress plugin) <= 4.4.8 <= 4.4.8

References

https://wordpress.org/plugins/wp-meta-seo/#developers

x_refsource_CONFIRM

https://patchstack.com/database/vulnerability/wp-meta-seo...

x_refsource_CONFIRM

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published
Jun 28, 2022
Vulnerability Reserved
Jun 8, 2022

Credit

Vulnerability discovered by Rafie Muhammad aka Yeraisci (Patchstack Alliance)