CVE-2015-0902

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code.

• CWE-200

• http://jvn.jp/en/jp/JVN75615300/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000046Vendor Advisory
• http://semperfiwebdesign.com/blog/all-in-one-seo-pack/all-in-one-seo-pack-release-history/Patch, Vendor Advisory
• http://jvn.jp/en/jp/JVN75615300/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000046Vendor Advisory
• http://semperfiwebdesign.com/blog/all-in-one-seo-pack/all-in-one-seo-pack-release-history/Patch, Vendor Advisory

Published

Apr 3, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-0896Multiple cross-site scripting (XSS) vulnerabilities in eXtpl…
• CVE-2015-0897LINE for Android version 5.0.2 and earlier and LINE for iOS …5.9
• CVE-2015-0898futomi CGI Cafe MP Form Mail CGI eCommerce before 2.0.12 on …
• CVE-2015-0899The MultiPageValidator implementation in Apache Struts 1 1.1…
• CVE-2015-0900Cross-site scripting (XSS) vulnerability in schedule.cgi in …
• CVE-2015-0901Cross-site scripting (XSS) vulnerability in the duwasai flas…
• CVE-2015-0903Buffer overflow in Saitoh Kikaku Maruo Editor 8.51 and earli…
• CVE-2015-0904The Restaurant Karaoke SHIDAX app 1.3.3 and earlier on Andro…
• CVE-2015-0905Cross-site request forgery (CSRF) vulnerability in bBlog all…
• CVE-2015-0906Directory traversal vulnerability in Lhaplus before 1.70 all…
• CVE-2015-0907Buffer overflow in Lhaplus before 1.70 allows remote attacke…
• CVE-2015-0910Cross-site scripting (XSS) vulnerability in TAGAWA Takao Tra…