Description

WordPress Plugin WP SEO TDK is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently change the title of frontend pages. WordPress Plugin WP SEO TDK version 2.0.2 is vulnerable; prior versions may also be affected.

Remediation

Disable the plugin until a fix is available

References

https://www.pluginvulnerabilities.com/2019/06/20/checking-the-security-of-fast-growing-wordpress-plugins-would-be-a-good-idea/

Related Vulnerabilities

Magento Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2019-7951)

WordPress Plugin File Manager Advanced Shortcode Directory Traversal (2.4)

Opencart Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3763)

WordPress Plugin Ads Pro-Multi-Purpose WordPress Advertising Manager Multiple Vulnerabilities (3.4)

WordPress 4.0.x Multiple Vulnerabilities (4.0 - 4.0.20)

Severity

High

Classification

CWE-264 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Missing Update Authentication Bypass