CVE-2023-0875: 
WordPress vulnerability analysis and mitigation

The WP Meta SEO WordPress plugin versions prior to 4.5.3 contained a significant security vulnerability identified as CVE-2023-0875. The vulnerability was discovered and publicly disclosed on February 27, 2023. This security issue affects the WP Meta SEO plugin, a popular WordPress extension used for search engine optimization purposes (WPScan, NVD).

The vulnerability is classified as a blind SQL Injection (SQLi) with a CVSS score of 7.7 (High). The issue stems from improper sanitization and escaping of inputs in SQL queries, falling under the OWASP Top 10 category A1: Injection and CWE-89. The vulnerability can be exploited by users with subscriber-level access or higher privileges (WPScan).

When successfully exploited, this vulnerability allows malicious actors with subscriber-level access to perform SQL injection attacks against the WordPress database. This could potentially lead to unauthorized access to sensitive database information, manipulation of database contents, or service disruption (WPScan).

The vulnerability has been patched in WP Meta SEO version 4.5.3. Website administrators running affected versions should immediately upgrade to version 4.5.3 or later to mitigate this security risk (WPScan).