CVE-2025-12814 — SiteSEO – SEO Simplified <= 1.3.2 - Improper Authorization to Authenticated Settings Reset
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to unauthorized modification of data due to n incorrect capability check on the siteseo_reset_settings function i…
Published: 2025-11-19 · CVSS: 5.3 · CVSS 3.1
The SiteSEO – SEO Simplified plugin for WordPress is vulnerable to unauthorized modification of data due to n incorrect capability check on the siteseo_reset_settings function in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, who have been granted access to at least on SiteSEO setting capability, to reset the plugin's settings.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7