title: WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
description: The WP Meta SEO WordPress plugin before 4.5.3 does not authorize several ajax actions, allowing low-privilege users to make updates to certain data and leading to an arbitrary redirect vulnerability.
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
vendor: Unknown
product: WP Meta SEO
versions:
status: affected, versionType: custom, version: 0, lessThan: 4.5.3
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}