Server-Side Request Forgery Vulnerability in SEOPress Plugin by WordPress
CVE-2026-85305

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Seopress
Vendor
CVE Published:
3 September 2026

What is CVE-2026-85305?

A Server-Side Request Forgery (SSRF) vulnerability in the SEOPress plugin for WordPress can allow attackers to make unauthorized requests from the server. This could potentially lead to the disclosure of sensitive information or exploitation of internal services. Users of SEOPress versions up to 10.1 are advised to update their installations promptly to mitigate any risks associated with this vulnerability.

Affected Version(s)

SEOPress <= 10.1

References

https://patchstack.com/database/wordpress/plugin/wp-seopr...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

MYUNGYONG LEE | Patchstack Bug Bounty Program
.