All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

Уязвимости

• CVE-2022-38093без авторизации · нужен клик≤ 4.2.3.1

  WordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities

  Высокий 8.8

• CVE-2021-25036нужен вход→ 4.1.3.1*

  All In One SEO < 4.1.5.3 - Authenticated Privilege Escalation

  Высокий 8.8

• CVE-2025-67950нужен вход≤ 4.9.1

  WordPress All In One SEO Pack plugin <= 4.9.1 - SQL Injection vulnerability

  Высокий 8.5

• CVE-2025-64295нужен вход≤ 4.8.6.1

  WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerability

  Средний 6.5

• CVE-2021-25037нужен вход→ 4.1.3.1*

  All In One SEO < 4.1.5.3 - Authenticated SQL Injection

  Средний 6.5

• CVE-2026-85492без авторизации · нужен клик≤ 5.0.1.1

  All in One SEO <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting via URL Pathname

  Средний 6.1

• CVE-2025-58650нужен вход≤ 4.8.7.1

  WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Broken Access Control Vulnerability

  Средний 5.4

• CVE-2019-16520нужен вход

  The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of

  Средний 5.4

• CVE-2024-3554участник+≤ 4.6.0

  All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2023-0586участник+≤ 4.2.9

  All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2023-0585админ≤ 4.2.9

  All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2025-58649нужен вход≤ 4.8.7.1

  WordPress All In One SEO Pack Plugin <= 4.8.7.1 - Sensitive Data Exposure Vulnerability

  Средний 4.3

• CVE-2026-5075участник+≤ 4.9.7

  All in One SEO <= 4.9.7 - Authenticated (Contributor+) Sensitive Information Exposure via 'internalOptions' Localized Script Data

  Средний 4.3

• CVE-2025-14384участник+≤ 4.9.2

  All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token a

  Средний 4.3

• CVE-2025-12847участник+≤ 4.8.9

  All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media D

  Средний 4.3