Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic 2.3.7

  • Severity: high-risk
  • Status: Fixed
  • Publication: July 1, 2016

The All in One SEO plugin for WordPress is potentially vulnerable to a type of cyber attack called Stored Cross-Site Scripting, which could allow attackers to inject malicious code into webpages. This vulnerability affects versions prior to 2.3.6 and is caused by the plugin not properly verifying the data it is receiving or properly protecting the data it is sending out. If a webpage is successfully injected, any user who visits it could have their computer or device taken over by the attacker.

Detected in:

All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic fixed vulnerable versions: >= * < 2.3.7
All in One SEO – Most Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic fixed vulnerable versions:
All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.