VULNERABILITY INTELLIGENCE

CVE-2015-0902

CVSS score5 MEDIUM
EPSS probability3.01%
CISA KEVNot currently listed
Published2015-04-03
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references