WordPress SEO by Yoast Plugin <= 1.7.3 - Multiple Vulnerabilities

2015-03-1400:00:00

N/A

patchstack.com

0.006 Low

EPSS

Percentile

78.1%

JSON

Multiple cross-site request forgery vulnerabilities exist in admin/class-bulk-editor-list-table.php. Because of these vulnerabilities, the attackers can hijack the authentication of certain users for requests that conduct SQL injection attacks.

Solution

           Update the plugin.

CPENameOperatorVersion
yoast seole1.7.3

CPE	Name	Operator	Version
	yoast seo	le	1.7.3

References

cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2293

0.006 Low

EPSS

Percentile

78.1%

JSON

Related for PATCHSTACK:F2BE1F001B72098B0FE0280F762DF4E0