Advisories · Technology

All in One SEO.

Every CVE that names All in One SEO among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19856 CVE record

CVSS 6.5 Medium

All in One SEO < 5.0.2.1 - Unauthenticated Arbitrary Shortcode Execution via Search Query
- All in One SEO
- Other injection
Not analysed yet 2 Oct 2026
CVE-2026-82884 CVE record

CVSS 6.8 Medium

All in One SEO < 5.0.0.1 - Contributor+ Stored XSS via ai-assistant Block
- All in One SEO
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2026
CVE-2026-10755 CVE record

CVSS 2.7 Low

All in One SEO < 4.9.9 – Contributor+ Incorrect Authorization via AI Integration
- All in One SEO
- Broken access control
Not analysed yet 20 Jul 2026
CVE-2024-3368 CVE record

CVSS 6.1 Medium

All in One SEO < 4.6.1.1 - Contributor+ Stored XSS
- All in One SEO
Not analysed yet 20 May 2024