← CVE Intelligence

CVE-2023-1669

SEOPress < 6.5.0.3 - Admin+ PHP Object Injection PUBLISHED

Description (CNA)

The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

Affected (CNA)

Vendor / productVersions
Unknown / SEOPressaffected 0 before 6.5.0.3

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.