CVE-2025-12847

🗓️ 16 Nov 2025 05:51:41Reported by redhat.comType

Authenticated attackers with Contributor access can delete media attachments via the rest endpoint in the All in One SEO plugin up to version 4.8.9.

Reporter	Title	Published	Views	Family All 9
CNNVD	WordPress plugin All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic 安全漏洞	15 Nov 202500:00	–	cnnvd
CVE	CVE-2025-12847	15 Nov 202505:45	–	cve
Cvelist	CVE-2025-12847 All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletion	15 Nov 202505:45	–	cvelist
EUVD	EUVD-2025-197686	15 Nov 202506:30	–	euvd
NVD	CVE-2025-12847	15 Nov 202506:15	–	nvd
Patchstack	WordPress All in One SEO plugin <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletion vulnerability	14 Nov 202523:26	–	patchstack
Positive Technologies	PT-2025-47041	15 Nov 202500:00	–	ptsecurity
Vulnrichment	CVE-2025-12847 All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletion	15 Nov 202505:45	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (November 10, 2025 to November 16, 2025)	20 Nov 202516:10	–	wordfence