CVE-2023-0875

PoC —

CVSS 3.1

8.8 high

EPSS

<1%p58

Published

Mar 20, 2023 (Mar 20, 2023)

Modified

Jun 17, 2026

Description

The WP Meta SEO WordPress plugin before 4.5.3 does not properly sanitize and escape inputs into SQL queries, leading to a blind SQL Injection vulnerability that can be exploited by subscriber+ users.

Vendors: joomunited
Products: wp meta seo
Ecosystems: WordPress
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.