Advisories · Technology
SEOPress.
Every CVE that names SEOPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
SEOPress < 10.4 - Authenticated Stored XSS via Analytics Tracking Settings
- SEOPress
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
WordPress SEOPress plugin <= 10.1 - Server Side Request Forgery (SSRF) vulnerability
- SEOPress
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
SEOPress < 7.9 - Unauthenticated Object Injection
- SEOPress
- CVSS 6.1 Medium
SEOPress < 7.8 - Contributor+ Open Redirect
- SEOPress
- CVSS 5.0 Medium
SEOPress < 7.8 - Contributor+ Stored XSS
- SEOPress
- CVSS 5.3 Medium
WordPress SEOPress plugin <= 7.7.1 - Sensitive Data Exposure vulnerability
- SEOPress
- Broken access control
- CVSS 4.8 Medium
WP SEO Press < 7.3 - Admin+ Stored XSS
- SEOPress
- CVSS 7.2 HighCritical · CVSS 7+ and EPSS
SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
- SEOPress
- Insecure deserialization
- CVSS 6.4 Medium
SEOPress <= 5.0.0 – 5.0.3 Authenticated Stored Cross-Site Scripting
- SEOPress
- Cross-site scripting (XSS)