CVE

CVE-2023-0876

6.1

CVSSmedium

Exploitable remotely over the internet · no authentication required · user interaction needed.

Description

The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.

Attack Vector

Network

Privileges Req.

None

User Interaction

Required

wp meta seo

Updated Sep 18, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2023-0876 Scanner

CVE-2023-0876 Scanner - Open Redirect vulnerability in WordPress Meta SEO

Used 3.3k times · 5.9k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: wp meta seo

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →