Unauthorized Settings Modification in WP Meta SEO Plugin for WordPress

CVE-2023-1023

Summary

The WP Meta SEO plugin for WordPress is susceptible to an authorization bypass flaw that allows authenticated users with subscriber-level access to manipulate the plugin's sitemap settings. This vulnerability arises from the absence of a proper capability check in the saveSitemapSettings function, leading to reliance on nonce validation that is accessible to all authenticated users, irrespective of their roles. Consequently, this oversight permits potential exploitation where attackers can alter vital plugin configurations without adequate permission.

References