Medium
CVE-2026-100152
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 34
Reset filters
Medium
CVE-2026-19856
All in One SEO <= 5.0.2.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2026-85492
All in One SEO <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting via URL Pathname
Medium
CVE-2026-82884
All in One SEO <= 5.0.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2026-10755
All in One SEO < 4.9.9 - Missing Authorization
Medium
CVE-2026-5075
All in One SEO <= 4.9.7 - Authenticated (Contributor+) Sensitive Information Exposure via 'internalOptions' Localized Script Data
Medium
CVE-2025-14384
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit Disclosure
Medium
CVE-2025-68579
FV Simpler SEO <= 1.9.6 - Missing Authorization
Medium
CVE-2025-67950
All In One SEO Pack <= 4.9.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2025-64295
All In One SEO Pack <= 4.8.6.1 - Authenticated (Subscriber+) Information Exposure
Medium
CVE-2025-12847
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletion
Medium
CVE-2025-58649
All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure
Medium
CVE-2025-58650
All In One SEO Pack <= 4.8.7.1 - Missing Authorization
Medium
CVE-2025-2892
All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL
Medium
CVE-2024-3554
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-3368
All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0585
All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-0586
All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-42494
All in One SEO Pro <= 4.2.5.1 - Authenticated (Admin+) Server Side Request Forgery
High
CVE-2022-38093
All in One SEO <= 4.2.3.1 - Cross-Site Request Forgery
Critical
CVE-2021-25037
All in One SEO 4.1.3.1 - 4.1.5.2 - Authenticated SQL Injection
High
CVE-2021-25036
All in One SEO 4.0.0 - 4.1.5.2 Authorization Bypass
High
CVE-2021-24307
All in One SEO <= 4.1.0.1 - Authenticated Code Injection
Medium
CVE-2020-35946
All in One SEO Pack <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.