SEOPress vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Latest SEOPress vulnerabilities

CVE-2026-85305 — WordPress SEOPress plugin <= 10.1 - Server Side Request Forgery (SSRF) vulnerability (CVSS 5.4)
CVE-2024-50454 — WordPress SEOPress plugin <= 8.1.1 - Unauthenticated Broken Access Control vulnerability (CVSS 5.3)
CVE-2024-50456 — WordPress SEOPress plugin <= 8.1.1 - Broken Access Control vulnerability (CVSS 8.8)
CVE-2024-50455 — WordPress SEOPress plugin <= 8.1.1 - Broken Access Control vulnerability (CVSS 8.8)
CVE-2024-9225 — SEOPress – On-site SEO <= 8.1.1 - Reflected Cross-Site Scripting (CVSS 6.1)
CVE-2024-5488 — SEOPress < 7.9 - Unauthenticated Object Injection (CVSS 9.8)
CVE-2024-4900 — SEOPress < 7.8 - Contributor+ Open Redirect (CVSS 6.1)
CVE-2024-4899 — SEOPress < 7.8 - Contributor+ Stored XSS (CVSS 5.0)
CVE-2024-1168 — SEOPress – On-site SEO <= 7.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL (CVSS 5.4)
CVE-2024-1134 — SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2024-2165 — SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2023-6290 — WP SEO Press < 7.3 - Admin+ Stored XSS (CVSS 4.8)
CVE-2023-1669 — SEOPress < 6.5.0.3 - Admin+ PHP Object Injection (CVSS 7.2)
CVE-2021-34641 — SEOPress <= 5.0.0 – 5.0.3 Authenticated Stored Cross-Site Scripting (CVSS 5.4)