Product by All in One SEO Team

    All in One SEO

    10 known vulnerabilities in All in One SEO (All in One SEO Team), 0 of them actively exploited (CISA KEV).

    Key figures

    10

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in All in One SEO (All in One SEO Team)
    HighCVE-2021-24307

    All in One SEO Pack < 4.1.0.2 - Admin RCE via unserialize

    		8.8
    HighCVE-2021-25036

    All In One SEO < 4.1.5.3 - Authenticated Privilege Escalation

    		8.8
    MediumCVE-2023-0586

    All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2021-25037

    All In One SEO < 4.1.5.3 - Authenticated SQL Injection

    		6.5
    MediumCVE-2024-3554

    All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-0585

    All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2025-2892

    All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-3368

    All in One SEO < 4.6.1.1 - Contributor+ Stored XSS

    		6.1
    HighCVE-2022-38093

    All in One SEO (WordPress plugin): Cross-Site Request Forgery (CSRF)

    		5.4
    MediumCVE-2022-42494

    WordPress All in One SEO Pro plugin <= 4.2.5.1 - Server Side Request Forgery (SSRF) vulnerability

    		3.0

    All products by All in One SEO Team