Known vulnerabilities in All in One SEO Pack

Software CPE: cpe:2.3:a:hallsofmontezuma:all-in-one-seo-pack:*:*:*:*:*:wordpress:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting All in One SEO Pack All in One SEO Pack is affected by 10 known vulnerabilities: 2 high, 8 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110197 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-2892
CWE-79 Low
No
No
4.8.2 04.06.2025 SB2025060439
#VU72626 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0585
CWE-79 Low
No
No
4.3.0 28.02.2023 SB2023022831
#VU72625 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-0586
CWE-79 Low
No
No
4.3.0 28.02.2023 SB2023022831
#VU59091 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CWE-89 High
No
No
4.1.5.3 23.12.2021 SB2021122301
#VU59090 - Improper Access Control
CWE-284 High
No
No
4.1.5.3 23.12.2021 SB2021122301
#VU30137 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
3.6.2 17.07.2020 SB2020071701
#VU21924 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16520
CWE-79 Low
No
No
3.2.7 17.10.2019 SB2019101706
#VU20691 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.3.7 02.09.2019 SB2016071001
#VU20684 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.3.8 02.09.2019 SB2016071311
#VU20528 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
2.1 02.09.2019 SB2018120416