CVE-2024-4900

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The SEOPress WordPress plugin before 7.8 does not validate and escape one of its Post settings, which could allow contributor and above role to perform Open redirect attacks against any user viewing a malicious post

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

No affected versions have been published.

Timeline

Published
Jun 24, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-490008.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490018.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490028.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490038.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490048.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490058.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490068.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490078.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490088.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-490098.8SQL Server Native Client Remote Code Execution VulnerabilityCVE-2024-49015.4An issue was discovered in GitLab CE/EE affecting all versions starting from 16.9 prior to 16.11.5, starting from 17.0 prior to 17.0.3, and CVE-2024-490108.8SQL Server Native Client Remote Code Execution Vulnerability
CVE-2024-4900: Medium severity, CVSS 6.1 | Vulnix