🔐 CVE Alert

CVE-2026-6391

MEDIUM 6.1

Sentence To SEO (keywords, description and tags) <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting via Settings Page Parameters

CVSS Score
6.1
EPSS Score
0.0%
EPSS Percentile
5th

The Sentence To SEO (keywords, description and tags) plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on the create_admin_page() function. This makes it possible for unauthenticated attackers to inject malicious web scripts and update plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

CWE CWE-352
Vendor eazyserver
Product sentence to seo (keywords, description and tags)
Published May 20, 2026
Last Updated May 20, 2026
Stay Ahead of the Next One

Get instant alerts for eazyserver sentence to seo (keywords, description and tags)

Be the first to know when new medium vulnerabilities affecting eazyserver sentence to seo (keywords, description and tags) are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

eazyserver / Sentence To SEO (keywords, description and tags)
0 ≤ 1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗
wordfence.com: https://www.wordfence.com/threat-intel/vulnerabilities/id/add32c06-90d0-466f-b176-aaae55cf03fb?source=cve plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L75 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L75 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L81 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L81 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L87 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L87 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/trunk/index.php#L50 plugins.trac.wordpress.org: https://plugins.trac.wordpress.org/browser/sentence-to-seo/tags/1.0/index.php#L50

Credits

Muhammad Nur Ibnu Hubab