TI-2026-52789 CVE-2026-75134 · GHSA-74xq-2f66-pchm
SEOWriting WordPress Plugin 1.12.5 Stored XSS via iframe onload
Priority MEDIUM 56
SEOWriting plugin for WordPress through 1.12.5 contains a stored cross-site scripting vulnerability that allows authenticated contributors to inject malicious JavaScript by exploiting an overly permissive KSES allowlist…