WordSec
WordSec

WP Meta SEO

Explore WP Meta SEO vulnerabilities across all versions. Currently tracking 18 known vulnerabilities, including severity, impact, and patch status.

01234567891002.05.2022Today02.05.20225.5WP Meta SEO <= 4.4.6 - Admin+ Stored Cross-Site Scripting via breadcrumbs CVSS 5.5 · 02.05.202222.06.20228.8WP Meta SEO <= 4.4.8 - Cross-Site Request Forgery to Settings Update CVSS 8.8 · 22.06.202222.02.20238.8WP Meta SEO <= 4.5.2 - Authenticated (Subscriber+) SQL Injection CVSS 8.8 · 22.02.202324.02.20234.3WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory' CVSS 4.3 · 24.02.20235.4WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings' CVSS 5.4 · 24.02.20234.3WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps' CVSS 4.3 · 24.02.20235.4WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation' CVSS 5.4 · 24.02.20234.3WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore' CVSS 4.3 · 24.02.20234.3WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap' CVSS 4.3 · 24.02.20234.3WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps' CVSS 4.3 · 24.02.20237.1WP Meta SEO <= 4.5.2 - Missing Authorization in 'startProcess' to Arbitrary Redirect via 'update_link_redirect' task CVSS 7.1 · 24.02.202327.03.20238.8WP Meta SEO <= 4.5.4 - Authenticated (Author+) PHAR Deserialization CVSS 8.8 · 27.03.202316.04.20247.2WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header CVSS 7.2 · 16.04.20245.3WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description CVSS 5.3 · 16.04.202412.09.20244.4WP Meta SEO <= 4.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting CVSS 4.4 · 12.09.20246.4WP Meta SEO <= 4.5.13 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 12.09.202423.06.20266.4WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter CVSS 6.4 · 23.06.20267.2WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging CVSS 7.2 · 23.06.2026

Strategic Overview

Avg CVSSMedium
6.0/ 10
Patch Coverage89%
Open

2

Fixed

16

Get automatic notifications for all WP Meta SEO vulnerabilities before they are exploited.

Vulnerability Records

18 records
2026-06-23 16:46
WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter
WP Meta SEO
<= 4.5.18
CVE-2026-11370
6.4
Medium
Enes IsmailNo
2026-06-23 16:46
WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging
WP Meta SEO
<= 4.5.18
CVE-2026-9643
7.2
High
zedeqNo
2024-09-12 00:00
WP Meta SEO <= 4.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
WP Meta SEO
<= 4.5.13
CVE-2024-45455
4.4
Medium
Robert DeVoreYes
2024-09-12 00:00
WP Meta SEO <= 4.5.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
WP Meta SEO
<= 4.5.13
CVE-2024-45456
6.4
Medium
Robert DeVoreYes
2024-04-16 00:00
WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header
WP Meta SEO
<= 4.5.12
CVE-2023-6961
7.2
High
Krzysztof ZającYes
2024-04-16 00:00
WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description
WP Meta SEO
<= 4.5.12
CVE-2023-6962
5.3
Medium
Krzysztof ZającYes
2023-03-27 00:00
WP Meta SEO <= 4.5.4 - Authenticated (Author+) PHAR Deserialization
WP Meta SEO
<= 4.5.4
CVE-2023-1381
8.8
High
Alex SanfordYes
2023-02-24 00:00
WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory'
WP Meta SEO
<= 4.5.3
CVE-2023-1026
4.3
Medium
Marco WotschkaYes
2023-02-24 00:00
WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings'
WP Meta SEO
<= 4.5.3
CVE-2023-1023
5.4
Medium
Marco WotschkaYes
2023-02-24 00:00
WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps'
WP Meta SEO
<= 4.5.3
CVE-2023-1029
4.3
Medium
Marco WotschkaYes
Showing 1–10 of 18 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C