Skip to main content

All In One Seo Pack

2 CVEs product

Monthly

CVE-2019-16520 MEDIUM POC PATCH This Month

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS WordPress All In One Seo Pack
NVD GitHub
CVSS 3.1
5.4
EPSS
1.5%
CVE-2015-0902 MEDIUM PATCH This Month

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

WordPress Information Disclosure All In One Seo Pack
NVD
CVSS 2.0
5.0
EPSS
1.7%
EPSS 2% CVSS 5.4
MEDIUM POC PATCH This Month

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS WordPress All In One Seo Pack
NVD GitHub
EPSS 2% CVSS 5.0
MEDIUM PATCH This Month

The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

WordPress Information Disclosure All In One Seo Pack
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy