Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic, with AI-generated Chinese analysis, references, and POCs.

Vendor: smub

CVE IDTitleCVSSSeverityPublished
CVE-2025-14384 All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit Disclosure CWE-862 4.3 Medium2026-01-16
CVE-2025-12847 All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletion CWE-862 4.3 Medium2025-11-15
CVE-2025-2892 All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL CWE-79 6.4 Medium2025-05-19
CVE-2024-3554 All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium2024-05-02
CVE-2023-0586 All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2023-02-24
CVE-2023-0585 All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting CWE-79 4.4 Medium2023-02-24

All 6 known CVE vulnerabilities affecting All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic with full Chinese analysis, references, and POCs where available.