All products

wp-seopress

WordPress · Plugin
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' ParametersCVE-2026-120515 wp-seopress WordPress Medium Fix reported
SEOPress – AI SEO Plugin & On-site SEO < 10.4 - Authenticated (Custom Role+) Stored Cross-Site ScriptingCVE-2026-108041 wp-seopress WordPress Medium Fix reported
SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template TagCVE-2026-116535 wp-seopress WordPress Medium Fix reported
SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' ParameterCVE-2026-101357 wp-seopress WordPress Medium Fix reported
SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display NameCVE-2026-96564 wp-seopress WordPress High Fix reported
SEOPress – AI SEO Plugin & On-site SEO <= 10.1 - Authenticated (Contributor+) Server-Side Request ForgeryCVE-2026-85305 wp-seopress WordPress Medium Fix reported
SEOPress <= 8.1.1 - Missing AuthorizationCVE-2024-50454 wp-seopress WordPress Medium Fix reported
SEOPress <= 8.1.1 - Missing AuthorizationCVE-2024-50455 wp-seopress WordPress Medium Fix reported
SEOPress <= 8.1.1 - Missing AuthorizationCVE-2024-50456 wp-seopress WordPress Medium Fix reported
SEOPress – On-site SEO <= 8.1.1 - Reflected Cross-Site ScriptingCVE-2024-9225 wp-seopress WordPress Medium Fix reported
SEOPress <= 7.8 - Unauthenticated PHP Object InjectionCVE-2024-5488 wp-seopress WordPress Critical Fix reported
SEOPress – On-site SEO <= 7.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URLCVE-2024-1168 wp-seopress WordPress Medium Fix reported
SEOPress <= 7.7.2 - Authenticated (Contributor+) Open RedirectCVE-2024-4900 wp-seopress WordPress Medium Fix reported
SEOPress <= 7.7.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-4899 wp-seopress WordPress Medium Fix reported
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1134 wp-seopress WordPress Medium Fix reported
SEOPress <= 7.6.1 - Information ExposureCVE-2024-34383 wp-seopress WordPress Medium Fix reported
SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Author+) Stored Cross-Site ScriptingCVE-2024-2165 wp-seopress WordPress Medium Fix reported
SEOPress – On-site SEO <= 7.2 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-6290 wp-seopress WordPress Medium Fix reported
SEOPress 5.0.0 - 5.0.3 - Stored Cross-Site ScriptingCVE-2021-34641 wp-seopress WordPress Medium Fix reported
SEOPress <= 6.5.0.2 - Authenticated (Administrator+) PHP Object InjectionCVE-2023-1669 wp-seopress WordPress Medium Fix reported