CVEvulnerability
CVE-2015-0902
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-04-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code.
Affected configurations
• semperfiwebdesign all in one seo pack (<= 2.2.5.1)
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://jvn.jp/en/jp/JVN75615300/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000046 Vendor Advisory
- http://semperfiwebdesign.com/blog/all-in-one-seo-pack/all-in-one-seo-pack-release-history/ Patch, Vendor Advisory
- http://jvn.jp/en/jp/JVN75615300/index.html Vendor Advisory
- http://jvndb.jvn.jp/jvndb/JVNDB-2015-000046 Vendor Advisory
- http://semperfiwebdesign.com/blog/all-in-one-seo-pack/all-in-one-seo-pack-release-history/ Patch, Vendor Advisory