Lucene search

Semperplugins Security Vulnerabilities

cve

CVE-2013-5988

A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.

6.1CVSS

6AI Score

0.002EPSS

2020-02-11 06:15 PM

cve

CVE-2019-16520

The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement.

5.4CVSS

5.2AI Score

0.001EPSS

2019-10-16 02:15 PM

cve

CVE-2020-35946

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.

5.4CVSS

5.3AI Score

0.001EPSS

2021-01-01 04:15 AM