VendorsAIOSEOall_in_one_seoany version
Vulnerabilities

AIOSEO All in One SEO 4.1.1.1 for WordPress any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

10CVEs
CVE-2021-24307
All in One SEO Pack < 4.1.0.2 - Admin RCE via unserialize
Published 2021-05-24 · Modified
9.0EPSS 0.533
CVE-2021-25036
All In One SEO < 4.1.5.3 - Authenticated Privilege Escalation
Published 2022-01-17 · Modified
8.8EPSS 0.030
CVE-2022-38093
WordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Published 2022-09-09 · Modified
8.8EPSS 0.004
CVE-2021-25037
All In One SEO < 4.1.5.3 - Authenticated SQL Injection
Published 2022-01-17 · Modified
6.5EPSS 0.013
CVE-2022-42494
WordPress All in One SEO Pro plugin <= 4.2.5.1 - Server Side Request Forgery (SSRF) vulnerability
Published 2022-11-08 · Modified
6.5EPSS 0.006
CVE-2023-0586
All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2023-02-24 · Modified
6.4EPSS 0.025
CVE-2024-3554
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published 2024-05-02 · Modified
6.4EPSS 0.005
CVE-2025-2892
All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL
Published 2025-05-19 · Analyzed
6.4EPSS 0.003
CVE-2024-3368
All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
Published 2024-05-20 · Analyzed
6.1EPSS 0.004
CVE-2023-0585
All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published 2023-02-24 · Modified
4.8EPSS 0.008