Medium · 5.4 CVE-2022-30337 EUVD-2022-52279GHSA-rx95-3qjc-3hfc

WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability

Published Jul 21, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: JoomUnited Product: WP Meta SEO (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in JoomUnited WP Meta SEO plugin <= 4.4.8 at WordPress allows an attacker to update the social settings.

Affected products

Vendor	Product	Affected	Fixed
JoomUnited	WP Meta SEO (WordPress plugin)	<= 4.4.8 – ≤ 4.4.8	—

References

https://wordpress.org/plugins/wp-meta-seo/#developers
https://patchstack.com/database/vulnerability/wp-meta-seo/wordpress-wp-meta-seo-plugin-4-4-8-social-settings-update-vis-cross-site-request-forgery-csrf-vulnerability