Lucene search

CVE-2023-0585

🗓️ 24 Feb 2023 15:12:15Reported by WordfenceType

The All in One SEO Pack plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to 4.2.9

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
Vulnrichment	CVE-2023-0585	24 Feb 202314:46	–	vulnrichment
WPVulnDB	All in One SEO Pack < 4.3.0 - Admin+ Stored XSS	24 Feb 202300:00	–	wpvulndb
Prion	Cross site scripting	24 Feb 202315:15	–	prion
Cvelist	CVE-2023-0585	24 Feb 202314:46	–	cvelist
NVD	CVE-2023-0585	24 Feb 202315:15	–	nvd
Patchstack	WordPress All In One SEO Pack Plugin <= 4.2.9 is vulnerable to Cross Site Scripting (XSS)	27 Feb 202300:00	–	patchstack
Wordfence Blog	All In One SEO Pack Vulnerabilities Impacting 3 Million Sites Patched	27 Feb 202317:52	–	wordfence
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (Feb 20, 2023 to Feb 26, 2023)	2 Mar 202314:49	–	wordfence
OpenVAS	WordPress All in One SEO Pack Plugin < 4.3.0 Multiple XSS Vulnerabilities	28 Feb 202300:00	–	openvas
0day.today	WordPress All In One SEO Pack 4.2.9 Cross Site Scripting Vulnerability	28 Feb 202300:00	–	zdt

Nvd

Vulners

Node

aioseo all_in_one_seoRange≤4.2.9wordpress

[
  {
    "vendor": "smub",
    "product": "All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic",
    "versions": [
      {
        "version": "*",
        "status": "affected",
        "lessThanOrEqual": "4.2.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/3db97180-9308-4891-9de9-acefe31d088f
plugins	www.plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php
plugins	www.plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php
plugins	www.plugins.trac.wordpress.org/changeset
plugins	www.plugins.trac.wordpress.org/browser/all-in-one-seo-pack/tags/4.2.9/app/Common/Main/Updates.php

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Feb 2023 15:15Current

4.9Medium risk

Vulners AI Score4.9

CVSS34.4 - 4.8

EPSS0.01489

SSVC