Cross-Site Request Forgery Vulnerability in WP Meta SEO Plugin by WordPress

CVE-2023-1028

What is CVE-2023-1028?

The WP Meta SEO plugin for WordPress has a vulnerability that allows unauthenticated attackers to update plugin options through Cross-Site Request Forgery due to inadequate nonce validation on the setIgnore function. Attackers can exploit this flaw by tricking a site administrator into triggering a malicious request, enabling them to alter plugin settings without permission. It is crucial to update to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References