Vulnerabilities / All in One SEO
All in One SEO vulnerabilities
Advisories WPSec published for All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights). Other sources may list more. Its attack surface: All in One SEO on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-08 | WPSEC-2026-0655 | All in One SEO <= 5.0.2.1 - Authenticated (Contributor+) Missing Authorization to Image Attachment Creation and Limited Image Disclosure via AI Image Generation | Medium 5.4 | 5.0.3 |
| 2026-10-02 | WPSEC-2026-0354 | All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via Search Query | High 7.3 | 5.0.2.1 |
License: CC BY 4.0