CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Joby Joseph SEO Meta Description Updater seo-meta-description-updater allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Meta Description Updater: from n/a through <= 1.2.0.
Explanation of Vulnerability in Simple Terms
The SEO Meta Description Updater plugin for WordPress contains a missing authorization flaw that allows authenticated users with low privileges to modify meta descriptions they should not have access to. An attacker with a basic user account can alter SEO metadata on the site without proper permission checks. This affects versions 1.2.0 and earlier.
What an attacker can do
Modify SEO meta descriptions on pages or posts without proper authorization.
Potential impact on your site
Unauthorized users can alter your site's SEO metadata, potentially damaging search rankings or injecting misleading descriptions.
Conditions required to exploit
Attacker must have a low-privilege user account (e.g., Contributor or Subscriber role) on the WordPress site.
Key dates
External resources
Related vulnerabilities
