Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: rilwis Clear all filters
TI-2026-75186 CVE-2026-104001 · GHSA-6247-9gvr-43xh

Code injection in Slim SEO WordPress plugin allows shortcode execution

Priority LOW 24

The The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 4.11.1 This is due to the software allowing users…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00227 Published 2026-10-16 No fix listed CWE-94
TI-2026-10653 CVE-2026-12408 · GHSA-h4h4-h3cx-x6xc

Information disclosure in rilwis Slim SEO – A Fast & Automated SEO Plugin For WordPress

Priority LOW 20

The Slim SEO – A Fast & Automated SEO Plugin For WordPress plugin for WordPress is vulnerable to Unauthorized Private Content Disclosure in all versions up to, and including, 4.9.8 via the `/wp-json/slim-seo/meta-tags/ai…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00422 Published 2026-07-01 No fix listed CWE-200
TI-2025-04124 CVE-2025-4611 · GHSA-m464-q4xf-9rw5

Slim SEO <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode

Priority LOW 29

The Slim SEO – Fast & Automated WordPress SEO Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's slim_seo_breadcrumbs shortcode in all versions up to, and including, 4.5.3 due to in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00535 Published 2025-05-21 No fix listed CWE-79