Security
فارسی
All products

all-in-one-seo-pack

WordPress · Plugin
33 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query ParameterCVE-2026-109367 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 5.0.2.0 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2026-19856 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Query ParameterCVE-2026-100152 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting via URL PathnameCVE-2026-85492 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 5.0.0.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-82884 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO < 4.9.9 - Missing AuthorizationCVE-2026-10755 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 4.9.7 - Authenticated (Contributor+) Sensitive Information Exposure via 'internalOptions' Localized Script DataCVE-2026-5075 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit DisclosureCVE-2025-14384 all-in-one-seo-pack WordPress Medium Fix reported
All In One SEO Pack <= 4.8.6.1 - Authenticated (Subscriber+) Information ExposureCVE-2025-64295 all-in-one-seo-pack WordPress Medium Fix reported
All In One SEO Pack <= 4.9.1 - Authenticated (Contributor+) SQL InjectionCVE-2025-67950 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media DeletionCVE-2025-12847 all-in-one-seo-pack WordPress Medium Fix reported
All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information ExposureCVE-2025-58649 all-in-one-seo-pack WordPress Medium Fix reported
All In One SEO Pack <= 4.8.7.1 - Missing AuthorizationCVE-2025-58650 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URLCVE-2025-2892 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2024-3554 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-3368 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 2.0.3 - Cross-Site Scripting via Search ParameterCVE-2013-5988 all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO <= 2.2.4.1 - Privilege Escalation to Arbitrary Post Modification all-in-one-seo-pack WordPress Medium Fix reported
All in One SEO Pack <= 2.3.7 - Unauthenticated Stored Cross-Site Scripting all-in-one-seo-pack WordPress High Fix reported
All in One SEO 4.1.3.1 - 4.1.5.2 - Authenticated SQL InjectionCVE-2021-25037 all-in-one-seo-pack WordPress Critical Fix reported