49 matches found
CVE-2026-100152
The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.2 This is due to the software allowing users to execute an action that doe...
EUVD-2026-91912
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopressgoogleanalyticsmatomoid' parameter in all versions up to, and including, 10.2 due to insufficient input sanitization and output escaping. This makes it possible for...
EUVD-2026-91907
The The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 5.0.2 This is due to the software allowing users to execute an action that doe...
EUVD-2026-91905
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Author Display Name in all versions up to, and including, 10.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to injec...
CVE-2026-85492
The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via URL Pathname in all versions up to, and including, 5.0.1.1 due to insufficient input sanitization and output...
EUVD-2026-91336
The All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic Schema, Local SEO, Sitemap & SEO Insights plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via URL Pathname in all versions up to, and including, 5.0.1.1 due to insufficient input sanitization and output...
CVE-2026-85492
The All in One SEO plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting (XSS) in all versions up to and including 5.0.1.1 . The root cause is insufficient input sanitization and output escaping involving the URL Pathname . An unauthenticated attacker can inject arbitrary web scrip...
CVE-2026-84779
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
EUVD-2026-70571
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
CVE-2026-84779 WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerability
Subscriber Broken Access Control in Agentimus – AI SEO, llms.txt & MCP for AI Agents = 1.51.0 versions...
CVE-2026-84779
Agentimus – AI SEO, llms.txt & MCP for AI Agents WordPress plugin versions
WordPress Agentimus – AI SEO, llms.txt & MCP for AI Agents plugin <= 1.51.0 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Agentimus – AI SEO, llms.txt & MCP for AI Agents versions = 1.51.0...
CVE-2026-66469
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...
CVE-2026-66469 WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...
CVE-2026-66469
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...
CVE-2026-66469 WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...
EUVD-2026-57888
Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...
CVE-2026-66469
The CVE-2026-66469 entry concerns Unauthenticated Broken Access Control in WordPress plugin Arvow AI SEO Writer (versions
