Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic 4.1.3.1*, 4.1.5.3 Clear all filters
TI-2021-07315 CVE-2021-25037 · GHSA-xgv3-98r5-2f57

All In One SEO < 4.1.5.3 - Authenticated SQL Injection

Priority LOW 31

The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileg…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01291 Published 2022-01-17 Fixed in 4.1.5.3 CWE-89
TI-2021-07314 CVE-2021-25036 · GHSA-cf7m-hm28-rpmp

All In One SEO < 4.1.5.3 - Authenticated Privilege Escalation

Priority MEDIUM 44

The All in One SEO WordPress plugin before 4.1.5.3 is affected by a Privilege Escalation issue, which was discovered during an internal audit by the Jetpack Scan team, and may grant bad actors access to protected REST AP…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03033 Published 2022-01-17 Fixed in 4.1.5.3 CWE-287