{ "id": "CVE-2023-1669", "sourceIdentifier": "contact@wpscan.com", "published": "2023-05-02T08:15:10.180", "lastModified": "2023-05-02T12:56:12.940", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present." } ], "metrics": {}, "weaknesses": [ { "source": "contact@wpscan.com", "type": "Primary", "description": [ { "lang": "en", "value": "CWE-502" } ] } ], "references": [ { "url": "https://wpscan.com/vulnerability/fb8791f5-2879-431e-9afc-06d5839e4b9d", "source": "contact@wpscan.com" } ] }