← All advisories

Medium severity5.4NVD Advisory· Published Nov 3, 2022· Updated Apr 28, 2026

CVE-2022-36404

CVE-2022-36404

Description

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in David Cole Simple SEO (WordPress plugin) plugin <= 1.8.12 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Coleds/Simple Seo
cpe:2.3:a:coleds:simple_seo:*:*:*:*:*:wordpress:*:*
Range: <=1.8.12
WordPress/Simple Seollm-fuzzy
Range: <=1.8.12
Package: https://wordpress.org/plugins/simple-seo

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/cds-simple-seo/wordpress-simple-seo-plugin-1-8-12-authenticated-sitemap-deletion-creation-vulnerabilitynvdThird Party Advisory

News mentions

0

No linked articles in our index yet.