Advisories · Technology
rainbowgeek SEOPress – AI SEO Plugin & On-site SEO.
Every CVE that names rainbowgeek SEOPress – AI SEO Plugin & On-site SEO among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag
- rainbowgeek SEOPress – AI SEO Plugin & On-site SEO
- Cross-site scripting (XSS)
- CVSS 4.9 Medium
SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' Parameter
- rainbowgeek SEOPress – AI SEO Plugin & On-site SEO
- Cross-site scripting (XSS)
- CVSS 7.2 High
SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display Name
- rainbowgeek SEOPress – AI SEO Plugin & On-site SEO
- Cross-site scripting (XSS)