Information disclosure in Xagio Seo – Ai Powered
CVE-2024-13807
The Xagio SEO plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 7.1.0.5 via the backup functionality due to weak filename structure and lack of protection in the directory. This make…
Vulnerability class: Information Disclosure
EPSS: 0.004 (26.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Xagio Seo – Ai Powered — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-13807?
- CVE-2024-13807 is a high-severity vulnerability in Xagio Seo – Ai Powered, classified under Information Disclosure. CVSS score: 7.5/10. Published 2025-08-28.
- How severe is CVE-2024-13807?
- High severity. CVSS v3 base score is 7.5 out of 10.