WordPress Plugin Vulnerabilities

Simple SEO < 1.8.13 - Sitemap Creation/Deletion via CSRF

Description

The plugin does not have CSRF checks when creating and deleting sitemaps, which could allow attackers to make logged admins create and delete arbitrary sitemaps via CSRF attacks

Affects Plugins

Fixed in 1.8.13

References

Classification

Miscellaneous

Original Researcher
Mika
Verified
No

Timeline

Publicly Published
2022-10-20 (about 3 years ago)
Added
2022-11-03 (about 3 years ago)
Last Updated
2022-11-03 (about 3 years ago)

Other