What’s Vulnerable › Products
joomunited WP Meta SEO vulnerabilities
18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.
Check whether your joomunited WP Meta SEO version is affected
Latest joomunited WP Meta SEO vulnerabilities
- CVE-2026-9643 — WP Meta SEO <= 4.5.18 - Unauthenticated Stored Cross-Site Scripting via REQUEST_URI in 404 Logging (CVSS 7.2)
- CVE-2026-11370 — WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter (CVSS 6.4)
- CVE-2024-45456 — WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-45455 — WordPress WP Meta SEO plugin <= 4.5.13 - Cross Site Scripting (XSS) vulnerability (CVSS 4.8)
- CVE-2023-6962 — WP Meta SEO <= 4.5.12 - Information Exposure via Meta Description (CVSS 5.3)
- CVE-2023-6961 — WP Meta SEO <= 4.5.12 - Unauthenticated Stored Cross-Site Scripting via Referer header (CVSS 6.1)
- CVE-2023-1381 — WP Meta SEO < 4.5.5 - Author+ PHAR Deserialization (CVSS 8.8)
- CVE-2023-0876 — WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect (CVSS 6.1)
- CVE-2023-0875 — WP Meta SEO < 4.5.3 - Subscriber+ SQLi (CVSS 8.8)
- CVE-2023-1028 — WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'setIgnore' (CVSS 4.3)
- CVE-2023-1027 — WP Meta SEO <= 4.5.3 - Missing Authorization in 'checkAllCategoryInSitemap' (CVSS 4.3)
- CVE-2023-1026 — WP Meta SEO <= 4.5.3 - Missing Authorization in 'listPostsCategory' (CVSS 4.3)
- CVE-2023-1024 — WP Meta SEO <= 4.5.3 - Missing Authorization in 'regenerateSitemaps' (CVSS 4.3)
- CVE-2023-1023 — WP Meta SEO <= 4.5.3 - Missing Authorization in 'saveSitemapSettings' (CVSS 4.3)
- CVE-2023-1022 — WP Meta SEO <= 4.5.3 - Missing Authorization in 'wpmsGGSaveInformation' (CVSS 4.3)
- CVE-2023-1029 — WP Meta SEO <= 4.5.3 - Cross-Site Request Forgery via 'regenerateSitemaps' (CVSS 4.3)
- CVE-2022-30337 — WordPress WP Meta SEO plugin <= 4.4.8 - Social Settings Update vis Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3)
- CVE-2022-1093 — WP Meta SEO < 4.4.7 - Admin+ Stored Cross-Site Scripting via breadcrumbs (CVSS 4.8)