Vulnerabilities

TI-2022-20687 CVE-2022-42494 · GHSA-q6vq-gmhj-jj3v

WordPress All in One SEO Pro plugin <= 4.2.5.1 - Server Side Request Forgery (SSRF) vulnerability

LOW 30

Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00713 Published 2022-11-08 No fix listed CWE-918

TI-2020-18387 CVE-2020-35946 · GHSA-3456-r253-4f5r

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.

LOW 26

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00847 Published 2021-01-01 No fix listed CWE-79

TI-2013-05102 CVE-2013-5988 · GHSA-m3rj-fx84-q954

A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin…

LOW 29

A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01094 Published 2020-02-11 No fix listed CWE-79

TI-2019-12385 CVE-2019-16520 · GHSA-m78p-fvq8-rg9f

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is…

LOW 28

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeh…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01532 Published 2019-10-16 No fix listed CWE-79

Vulnerabilities

Filters

WordPress All in One SEO Pro plugin <= 4.2.5.1 - Server Side Request Forgery (SSRF) vulnerability

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress.

A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin…

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is…