Lucene search
+L

135 matches found

Patchstack
Patchstack
•added 2026/10/03 9:04 a.m.•9 views

WordPress All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Kuba in WordPress Plugin All In One SEO Pack versions = 5.0.2...

6.5CVSS5.9AI score0.00356EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/01/30 8:24 a.m.•23 views

WordPress All in One SEO plugin < 4.6.1.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmtirii Ignatyev in WordPress Plugin All In One SEO Pack versions 4.6.1.1...

6.1CVSS5.9AI score0.00369EPSS
SaveExploits2References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:30 a.m.•20 views

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

5.4CVSS6.1AI score0.01532EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/06 11:14 a.m.•27 views

CVE-2025-31044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS5.6AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/05 11:17 a.m.•17 views

CVE-2025-31044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/05 10:23 a.m.•16 views

EUVD-2026-0870

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS7.1AI score0.00251EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/05 10:23 a.m.•56 views

CVE-2025-31044

Summary: CVE-2025-31044 is an SQL Injection in the WordPress plugin Premium SEO Pack (AA-Team Premium SEO Pack). The issue stems from improper neutralization of special elements in SQL commands, allowing injection through the plugin’s queries. Affected versions are up to 3.3.2; no public exploit ...

8.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/05 10:23 a.m.•7 views

CVE-2025-31044 WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/05 10:23 a.m.•50 views

CVE-2025-31044 WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•15 views

WordPress plugin Premium SEO Pack SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injectio...

8.5CVSS7.7AI score0.00251EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/01/05 12:00 a.m.•24 views

PT-2026-1262

Name of the Vulnerable Software and Affected Versions AA-Team Premium SEO Pack versions through 3.3.2 Description The software contains a flaw related to the improper handling of special characters within SQL commands, which could lead to SQL Injection. The issue allows manipulation of SQL querie...

8.5CVSS7AI score0.00251EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•2 views

CVE-2025-31044: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•2 views

CVE-2025-68579: Missing Authorization

Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Simpler SEO: from n/a through = 1.9.6...

5.3CVSS5.9AI score0.00254EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 7:22 a.m.•35 views

CVE-2025-64295

CVE-2025-64295 affects the WordPress plugin All in One SEO Pack (all-in-one-seo-pack), credited as a vulnerability in versions up to and including 4.8.6.1 . The issue is described as an Insertion of Sensitive Information Into Sent Data vulnerability that allows retrieval of embedded sensitive dat...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/18 7:22 a.m.•17 views

EUVD-2025-204062

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.6.1...

6.5CVSS6.4AI score0.00315EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•44 views

CVE-2025-64295 WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.6.1...

6.5CVSS0.00315EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•5 views

CVE-2025-64295: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.6.1...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/17 10:03 a.m.•27 views

CVE-2025-67950

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Blind SQL Injection.This issue affects All In One SEO Pack: from n/a through = 4.9.1...

8.5CVSS7.7AI score0.003EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/16 9:31 a.m.•12 views

EUVD-2025-203564

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Blind SQL Injection.This issue affects All In One SEO Pack: from n/a through = 4.9.1...

8.5CVSS7.1AI score0.003EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/16 9:15 a.m.•18 views

CVE-2025-67950

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Blind SQL Injection.This issue affects All In One SEO Pack: from n/a through = 4.9.1...

8.5CVSS0.003EPSS
SaveExploits0References1
Rows per page
Query Builder