CVE-2023-1669

Published: May 2, 2023Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected (1)

Products: Seopress: Seopress

Seopress

1 product

Seopress

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Seopress Seopress	Before 6.5.0.3

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://wpscan.com/vulnerability/fb8791f5-2879-431e-9afc-06d5839e4b9d

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/fb8791f5-2879-431e-9afc-06d5839e4b9d

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.