Category Seo Meta Tags Vulnerabilities

The Category SEO Meta Tags plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.5. This is due to missing or incorrect nonce validation on the 'csmt_admin_options' function. This makes it possible for unauthenticated attackers to change the plugin settings via a forged re...

CVSS:

4.3

Affected:

up to 2.5

Fix:

No patched version reported

Disclosed:

Oct 25, 2023

CVE-2023-46618 on NVD →

The Category SEO Meta Tags plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inj...

CVSS:

4.4

Affected:

up to 2.5

Fix:

No patched version reported

Disclosed:

Oct 17, 2023

CVE-2023-46091 on NVD →