All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic

Vulnerabilities 38Slug all-in-one-seo-packLatest version 4.9.6.2WordPress.org →

Minimum safe version

4.9.3

Update to 4.9.3 or later to address 38 fixable vulnerabilities

Latest available4.9.6.2 ✓
Medium 5.4
2025-09-22< 4.8.7.2

All In One SEO Pack <= 4.8.7.1 - Missing Authorization

WordfenceEUVDCVE
Medium 4.3
2025-09-22< 4.8.7.2

All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure

WordfenceEUVDCVE
Medium 6.4
2025-05-19< 4.8.2

WordPress All In One SEO Pack Plugin <= 4.8.1.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackEUVDWordfenceCVE
Medium 4.8
2023-02-27< 4.3.0

WordPress All In One SEO Pack Plugin <= 4.2.9 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
Medium 5.4
2023-02-27< 4.3.0

WordPress All In One SEO Pack Plugin <= 4.2.9 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWordfenceWPScan
N/A
2014-05-31< 2.1.6

All in One SEO <= 2.1.5 - Missing Authorization

Wordfence
N/A
2014-05-31< 2.1.6

All in One SEO <= 2.1.5 - Cross-Site Scripting

Wordfence
N/A
2014-05-31< 2.2.5

All in One SEO <= 2.2.4.1 - Privilege Escalation to Arbitrary Post Modification

Wordfence
N/A
2015-04-20< 2.2.6.2

All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting

Wordfence
N/A
2016-07-01< 2.3.7

All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 2.3.6 - Stored Cross-Site Scripting

Wordfence
N/A
2016-07-13< 2.3.8

All in One SEO Pack <= 2.3.7 - Unauthenticated Stored Cross-Site Scripting

Wordfence
N/A
2018-10-18< 2.10

All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting

Wordfence
N/A
< 2.1.6

All in One SEO Pack &lt;= 2.1.5 - Unspecified Privilege Escalation

WPScan
N/A
< 2.1.6

All in One SEO Pack &lt;= 2.1.5 - aioseop_functions.php new_meta Parameter XSS

WPScan
N/A
< 2.2.6.2

wpscan.com

WPScan
N/A
< 2.3.7

All in One SEO Pack &lt;= 2.3.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS)

WPScan
N/A
< 2.3.8

All in One SEO Pack &lt;= 2.3.7 - Unauthenticated Stored Cross-Site Scripting (XSS)

WPScan
N/A
< 2.10

All in One SEO Pack &lt;= 2.9.1.1 - Authenticated Stored Cross-Site Scripting (XSS)

WPScan
N/A
2015-05-15< 2.1.6

WordPress All in One SEO Pack Plugin <= 2.1.5 - Privilege Escalation

Patchstack
N/A
2015-05-15< 2.1.6

WordPress All in One SEO Pack Plugin <= 2.1.5 - Cross Site Scripting

Patchstack
N/A
2015-09-09< 2.2.6.2

WordPress All in One SEO Pack Plugin <= 2.2.6.1 - Cross Site Scripting

Patchstack
N/A
2016-07-11< 2.3.6.2

WordPress All in One SEO Pack Plugin 2.3.6.1 - Persistent XSS

Patchstack
N/A
2016-07-19< 2.3.8

WordPress All in One SEO Pack Plugin <= 2.3.7 - Cross Site Scripting

Patchstack
N/A
2016-07-19< 2.3.7

WordPress All in One SEO Pack Plugin <= 2.3.6.1 - Stored Cross Site Scripting

Patchstack