CVE-2024-5488 — SEOPress < 7.9 - Unauthenticated Object Injection
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthentic…
Published: 2024-07-09 · CVSS: 9.8 · CVSS 3.1
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7