CVE-2025-12367
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.3.1. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with Author-level access and above, to enable or disable arbitrary SiteSEO features that they should not have access to.
Vendor
-
Product
-
CWE
Yayın Tarihi
2025-11-01 04:16:04
Güncelleme
2025-11-04 15:41:31
Source Identifier
security@wordfence.com
KEV Date Added
-