CVE-2015-0902

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.1860%

EPSS Percentile15.61th

Published2015年4月3日

Last Modified2026年5月6日

Vulnerability Description

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code.

Affected Platforms (CPE)

📦

Semperfiwebdesign

All In One Seo Pack

<= 2.2.5.1

References & Advisories

🔗 http://jvn.jp/en/jp/JVN75615300/index.html

🔗 http://jvndb.jvn.jp/jvndb/JVNDB-2015-000046

🔗 http://semperfiwebdesign.com/blog/all-in-one-seo-pack/all-in-one-seo-pack-release-history/