CVE-2026-109367

The All in One SEO WordPress plugin (versions up to and including 5.0.3 ) is vulnerable to Sensitive Information Exposure via the 's' search query parameter . This flaw allows unauthenticated attackers to extract non-public post meta values, such as API keys and internal notes , which are emitted...