Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
wp-seopress
WordPress
· Plugin
20 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' Parameters
CVE-2026-120515
wp-seopress
WordPress
Medium
Fix reported
2026-11-07
SEOPress – AI SEO Plugin & On-site SEO < 10.4 - Authenticated (Custom Role+) Stored Cross-Site Scripting
CVE-2026-108041
wp-seopress
WordPress
Medium
Fix reported
2026-11-05
SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag
CVE-2026-116535
wp-seopress
WordPress
Medium
Fix reported
2026-10-31
SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' Parameter
CVE-2026-101357
wp-seopress
WordPress
Medium
Fix reported
2026-10-03
SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display Name
CVE-2026-96564
wp-seopress
WordPress
High
Fix reported
2026-10-03
SEOPress – AI SEO Plugin & On-site SEO <= 10.1 - Authenticated (Contributor+) Server-Side Request Forgery
CVE-2026-85305
wp-seopress
WordPress
Medium
Fix reported
2026-09-09
SEOPress <= 8.1.1 - Missing Authorization
CVE-2024-50454
wp-seopress
WordPress
Medium
Fix reported
2024-10-30
SEOPress <= 8.1.1 - Missing Authorization
CVE-2024-50455
wp-seopress
WordPress
Medium
Fix reported
2024-10-30
SEOPress <= 8.1.1 - Missing Authorization
CVE-2024-50456
wp-seopress
WordPress
Medium
Fix reported
2024-10-30
SEOPress – On-site SEO <= 8.1.1 - Reflected Cross-Site Scripting
CVE-2024-9225
wp-seopress
WordPress
Medium
Fix reported
2024-10-02
SEOPress <= 7.8 - Unauthenticated PHP Object Injection
CVE-2024-5488
wp-seopress
WordPress
Critical
Fix reported
2024-07-24
SEOPress – On-site SEO <= 7.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL
CVE-2024-1168
wp-seopress
WordPress
Medium
Fix reported
2024-06-20
SEOPress <= 7.7.2 - Authenticated (Contributor+) Open Redirect
CVE-2024-4900
wp-seopress
WordPress
Medium
Fix reported
2024-06-17
SEOPress <= 7.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-4899
wp-seopress
WordPress
Medium
Fix reported
2024-06-14
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-1134
wp-seopress
WordPress
Medium
Fix reported
2024-05-24
SEOPress <= 7.6.1 - Information Exposure
CVE-2024-34383
wp-seopress
WordPress
Medium
Fix reported
2024-05-07
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-2165
wp-seopress
WordPress
Medium
Fix reported
2024-04-09
SEOPress – On-site SEO <= 7.2 - Authenticated (Admin+) Stored Cross-Site Scripting
CVE-2023-6290
wp-seopress
WordPress
Medium
Fix reported
2024-02-06
SEOPress 5.0.0 - 5.0.3 - Stored Cross-Site Scripting
CVE-2021-34641
wp-seopress
WordPress
Medium
Fix reported
2024-01-22
SEOPress <= 6.5.0.2 - Authenticated (Administrator+) PHP Object Injection
CVE-2023-1669
wp-seopress
WordPress
Medium
Fix reported
2024-01-22