Xagio SEO

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xagio SEO records in CISA KEV

No Xagio SEO vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2026-20153 CVE-2026-24968 · GHSA-v42j-73h5-995f

WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability

MEDIUM 49

Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through <= 7.1.0.30.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00424 Published 2026-03-25 No fix listed CWE-266

TI-2026-54466 CVE-2026-78295 · GHSA-cqp7-c9qc-v9jw

WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Request Forgery (CSRF) vulnerability

LOW 39

Unauthenticated Cross Site Request Forgery (CSRF) in Xagio SEO <= 7.1.0.43 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00201 Published 2026-09-17 No fix listed CWE-352

TI-2025-18419 CVE-2025-24702 · GHSA-r634-5v75-69xx

WordPress Xagio SEO plugin <= 7.0.0.20 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xagio SEO Xagio SEO xagio-seo allows Stored XSS.This issue affects Xagio SEO: from n/a through <= 7.0.0.20.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2025-01-24 No fix listed CWE-79

TI-2025-39173 CVE-2025-63025 · GHSA-7mp9-5ggg-p6pp

WordPress Xagio SEO plugin <= 7.1.0.37 - Broken Access Control vulnerability

LOW 19

Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through <= 7.1.0.37.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0022 Published 2025-12-09 No fix listed CWE-862

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0