The Simple SEO plugin for WordPress has a security issue in versions up to and including 1.8.12. This allows people who are not logged in to the website to create or delete things by tricking an administrator into clicking a link. This is because the plugin is missing a security check called a ‘nonce’
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
