Skip to content
OpenAdvisories

Product · David Cole

Simple SEO (WordPress plugin)

2 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 5.4

    WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 1.8.12 on WordPress allows attackers to create or delete sitemaps.

  • Medium 5.4

    WordPress Simple SEO plugin <= 1.8.12 - Broken Access Control vulnerability

    Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO (WordPress plugin) plugin <= 1.8.12 versions.