Vendors / Semper Plugins, LLC Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Semper Plugins, LLC records in CISA KEV No Semper Plugins, LLC vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 30
Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00713 · Published 2022-11-08 · No fix listed CWE-918
Priority LOW 29
A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01094 · Published 2020-02-11 · No fix listed CWE-79
Priority LOW 28
The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeh…
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.01532 · Published 2019-10-16 · No fix listed CWE-79
Priority LOW 26
An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00847 · Published 2021-01-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium4 Low0 No CVSS0