CyberRota Analysis
AI-GeneratedThe Premium SEO WordPress plugin contains a critical vulnerability that introduces an unauthenticated backdoor, allowing attackers to create hidden administrator accounts and potentially execute remote code, conduct server-side request forgery, and inject arbitrary scripts. This poses a severe risk to website integrity and security, enabling full control by unauthorized users. WordPress site administrators using this plugin should prioritize immediate remediation to protect their systems from exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injection, giving an unauthenticated attacker full control of the affected site.