CVE-2023-0876 PoC — WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0876.yaml

Associated Vulnerability

Title: WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect (CVE-2023-0876)
Description:The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.

Description

The WP Meta SEO WordPress plugin before 4.5.3 did not authorize several AJAX actions, which allowed low-privilege users to update certain data and resulted in an arbitrary redirect vulnerability.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →