Medium 5.3
2025-10-22< 2.6.0
CVE-2025-49376
Minimum safe version
2.6.1
Update to 2.6.1 or later to address 8 fixable vulnerabilities
CVE-2025-49376
DELUCKS SEO <= 2.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-48165
CVE-2025-47686
WordPress DELUCKS SEO plugin <= 2.7.0 - Arbitrary File Download vulnerability
CVE-2024-30538
CVE-2019-25146
DELUCKS SEO < 2.1.8 - Stored Cross Site Scripting
DELUCKS SEO <= 2.1.7 - Unauthenticated Options Update
WordPress DELUCKS SEO plugin <= 2.1.7 - Unauthenticated Options Update vulnerability