What’s Vulnerable › Vulnerabilities

CVE-2024-3679: Premium SEO Pack – WP SEO Plugin <= 1.6.002 - Unauthenticated Information Exposure

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-29 · updated 2026-06-17
• Weakness: CWE-200

Description

The Premium SEO Pack – WP SEO Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.6.002. This makes it possible for unauthenticated attackers to view limited information from password protected posts through the social meta data.

Affected products

• calinvingan Premium SEO Pack – WP SEO Plugin: through 1.6.001

References

• https://wordpress.org/plugins/premium-seo-pack/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/ccb65de5-bfb5-47db-87c9-ad46e65924b8?source=cve

Get alerted when CVE-2024-3679 or the next vulnerability affects your stack