Lucene search
+L

145 matches found

NVD
NVD
•added 2026/10/13 6:16 a.m.•11 views

CVE-2026-54868

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...

6.5CVSS0.00133EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/13 5:50 a.m.•13 views

EUVD-2026-98297

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...

6.5CVSS5.7AI score0.00133EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/13 5:50 a.m.•38 views

CVE-2026-54868 WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...

6.5CVSS0.00133EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/13 5:50 a.m.•27 views

CVE-2026-54868

The FolioVision FV Simpler SEO plugin (fv-all-in-one-seo-pack) for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) . This issue, identified as CWE-79 , stems from the improper neutralization of input during web page generation . The vulnerability impacts versions from n/a through 1.9...

6.5CVSS5.7AI score0.00133EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/13 12:00 a.m.•7 views

CVE-2026-54868: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7...

6.5CVSS5.7AI score0.00133EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/10/03 9:04 a.m.•28 views

WordPress All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) plugin <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution vulnerability

Unauthenticated Arbitrary Shortcode Execution vulnerability discovered by Kuba in WordPress Plugin All In One SEO Pack versions = 5.0.2...

6.5CVSS5.8AI score0.00356EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2026/01/30 8:24 a.m.•26 views

WordPress All in One SEO plugin < 4.6.1.1 - Contributor+ Stored XSS vulnerability

Contributor+ Stored XSS vulnerability discovered by Dmtirii Ignatyev in WordPress Plugin All In One SEO Pack versions 4.6.1.1...

6.1CVSS5.8AI score0.00369EPSS
SaveExploits2References1Affected Software1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:30 a.m.•23 views

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress aka All in One SEO Pack is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement...

5.4CVSS6.1AI score0.01532EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2026/01/06 11:14 a.m.•32 views

CVE-2025-31044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS5.6AI score0.00251EPSS
SaveExploits0References1
NVD
NVD
•added 2026/01/05 11:17 a.m.•22 views

CVE-2025-31044

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS0.00251EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/01/05 10:23 a.m.•55 views

CVE-2025-31044 WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS0.00251EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/01/05 10:23 a.m.•10 views

CVE-2025-31044 WordPress Premium SEO Pack <= 3.3.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/01/05 10:23 a.m.•20 views

EUVD-2026-0870

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS7.1AI score0.00251EPSS
SaveExploits0References2
CVE
CVE
•added 2026/01/05 10:23 a.m.•61 views

CVE-2025-31044

Summary: CVE-2025-31044 is an SQL Injection in the WordPress plugin Premium SEO Pack (AA-Team Premium SEO Pack). The issue stems from improper neutralization of special elements in SQL commands, allowing injection through the plugin’s queries. Affected versions are up to 3.3.2; no public exploit ...

8.5CVSS5.8AI score0.00251EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/01/05 12:00 a.m.•21 views

WordPress Plugin Premium SEO Pack has a SQL injection vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injectio...

8.5CVSS5.9AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/05 12:00 a.m.•6 views

CVE-2025-31044: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AA-Team Premium SEO Pack allows SQL Injection.This issue affects Premium SEO Pack: from n/a through 3.3.2...

8.5CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•9 views

CVE-2025-68579: Missing Authorization

Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Simpler SEO: from n/a through = 1.9.6...

5.3CVSS6AI score0.00254EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/12/18 7:22 a.m.•21 views

EUVD-2025-204062

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.6.1...

6.5CVSS6.4AI score0.00315EPSS
SaveExploits0References2
CVE
CVE
•added 2025/12/18 7:22 a.m.•37 views

CVE-2025-64295

CVE-2025-64295 affects the WordPress plugin All in One SEO Pack (all-in-one-seo-pack), credited as a vulnerability in versions up to and including 4.8.6.1 . The issue is described as an Insertion of Sensitive Information Into Sent Data vulnerability that allows retrieval of embedded sensitive dat...

6.5CVSS5.8AI score0.00315EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 7:22 a.m.•46 views

CVE-2025-64295 WordPress All In One SEO Pack plugin <= 4.8.6.1 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in Syed Balkhi All In One SEO Pack all-in-one-seo-pack allows Retrieve Embedded Sensitive Data.This issue affects All In One SEO Pack: from n/a through = 4.8.6.1...

6.5CVSS0.00315EPSS
SaveExploits0References1
Rows per page
Query Builder