CVE-2024-5488

PoC —

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Jul 9, 2024 (Jul 9, 2024)

Modified

Jun 17, 2026

Description

The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present.

Vendors: seopress
Products: seopress
Ecosystems: WordPress
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news0 stories

No ingested article mentions this CVE yet.