Aioseo

12 CVEs across 2 Aioseo products. Browse Aioseo vulnerabilities, severities, and proof-of-concept exploits.

Aioseo products with known CVEs

ProductCVEs
All In One Seo10
Broken Link Checker By Aioseo – Easily Fix/monitor Internal And External Links2
Aioseo CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-11734Medium5.42025-11-18The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to unauthorized post modification due to…
CVE-2025-2892Medium6.42025-05-19The All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the pos…
CVE-2025-1264Medium6.52025-04-06The Broken Link Checker by AIOSEO – Easily Fix/Monitor Internal and External links plugin for WordPress is vulnerable to SQL Injection via the 'orderBy' parame…
CVE-2024-3368Medium6.12024-05-20The All in One SEO WordPress plugin before 4.6.1.1 does not validate and escape some of its Post fields before outputting them back, which could allow users w…
CVE-2024-3554Medium6.42024-05-02The All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic plugin for WordPress is vulnerable to Stored Cross-Site Scripti…
CVE-2023-0586Medium6.42023-02-24The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due t…
CVE-2023-0585Medium4.42023-02-24The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in versions up to, and including, 4.2.9 due t…
CVE-2022-42494Low3.02022-11-08Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.
CVE-2022-38093Medium5.42022-09-09Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in All in One SEO plugin <= 4.2.3.1 at WordPress.
CVE-2021-25037Medium6.52022-01-17The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Je…
CVE-2021-25036High8.82022-01-17The All in One SEO WordPress plugin before 4.1.5.3 is affected by a Privilege Escalation issue, which was discovered during an internal audit by the Jetpack Sc…
CVE-2021-24307High8.82021-05-24The All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privi…