(High Priority) A potential vulnerability related to PHP Object Injection was found for the SEOPress plugin.

What Steps Did ClearPG Take?

• We were notified about the issue and checked for any sites that might be affected.
• For our managed hosting customers, we automatically updated the plugin to the latest version after verifying the vulnerability was fixed.

References:

• https://patchstack.com/database/vulnerability/wp-seopress/wordpress-seopress-plugin-7-9-authentication-bypass-leading-to-php-object-injection-vulnerability
• https://wpscan.com/vulnerability/28507376-ded0-4e1a-b2fc-2182895aa14c/