Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-44627 EUVD-2022-47563GHSA-mm3v-9pfv-wfjx

WordPress Simple SEO plugin <= 1.8.12 - Cross-Site Request Forgery (CSRF) vulnerability

Published Nov 3, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: David Cole Product: Simple SEO (WordPress plugin) Category: Web / CMS

Description

Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO plugin <= 1.8.12 on WordPress allows attackers to create or delete sitemaps.

Affected products

VendorProductAffectedFixed
David Cole Simple SEO (WordPress plugin) <= 1.8.12 – ≤ <= 1.8.12 —

References