PT-2022-27269 · Unknown · David Cole Simple Seo

Mika · Published 2022-11-03 · Updated 2022-11-04 · CVE-2022-44627

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions David Cole Simple SEO plugin version 1.8.12 and earlier

Description A Cross-Site Request Forgery (CSRF) issue allows attackers to create or delete sitemaps. This can be exploited by attackers to manipulate the website's SEO settings.

Recommendations For David Cole Simple SEO plugin version 1.8.12 and earlier, update to a version later than 1.8.12 to resolve the issue. At the moment, there is no information about other specific fixes for this vulnerability.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2022-44627

Affected Products

David Cole Simple Seo

References · 5

• https://osv.dev/vulnerability/CVE-2022-44627 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44627 · Security Note
• https://patchstack.com/database/vulnerability/cds-simple-seo/wordpress-simple-seo-plugin-1-8-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve · Note
• https://wordpress.org/plugins/cds-simple-seo/#developers · Note
• https://t.me/cibsecurity/52538 · Telegram Post