SEO Meta Description Updater
SEO Meta Description Updater has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for SEO Meta Description Updater has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Abu Hurayra (HurayraIIT). SEO Meta Description Updater is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-62928SEO Meta Description Updater <= 1.2.0 - Missing Authorization
Read the full analysisVulnerability Records
SEO Meta Description Updater
Author
Joby Joseph
SEO Meta Description Updater is a lightweight plugin that enables updating SEO meta descriptions for posts using the WordPress REST API. Usage After activation, you can update a post’s meta description using: POST /wp-json/seo-meta/v1/update/{post_id}
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C