All in One SEO Pack

Plugin is vulnerable to unauthorized access of data due to a missing capability check on the `/aioseo/v1/ai/credits` REST route. This makes it possible for authenticated attackers, with Contributor-level access and above, to disclose the global AI access token.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.7.1
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1
• All in One SEO Pack 4.5.4
• All in One SEO Pack 4.5.5
• All in One SEO Pack 4.5.6
• All in One SEO Pack 4.5.7.1
• All in One SEO Pack 4.5.7.2
• All in One SEO Pack 4.5.7.3
• All in One SEO Pack 4.5.8
• All in One SEO Pack 4.5.9.1
• All in One SEO Pack 4.5.9.2
• All in One SEO Pack 4.6.0
• All in One SEO Pack 4.6.1.1
• All in One SEO Pack 4.6.2
• All in One SEO Pack 4.6.3
• All in One SEO Pack 4.6.4
• All in One SEO Pack 4.6.5
• All in One SEO Pack 4.6.6
• All in One SEO Pack 4.6.7.1
• All in One SEO Pack 4.6.8.1
• All in One SEO Pack 4.6.9
• All in One SEO Pack 4.6.9.1
• All in One SEO Pack 4.7.0
• All in One SEO Pack 4.7.1.1
• All in One SEO Pack 4.7.2
• All in One SEO Pack 4.7.3
• All in One SEO Pack 4.7.4.1
• All in One SEO Pack 4.7.4.2
• All in One SEO Pack 4.7.5
• All in One SEO Pack 4.7.5.1
• All in One SEO Pack 4.7.6
• All in One SEO Pack 4.7.7
• All in One SEO Pack 4.7.7.1
• All in One SEO Pack 4.7.7.2
• All in One SEO Pack 4.7.8
• All in One SEO Pack 4.7.9
• All in One SEO Pack 4.7.9.1
• All in One SEO Pack 4.8.0
• All in One SEO Pack 4.8.1
• All in One SEO Pack 4.8.1.1
• All in One SEO Pack 4.8.2
• All in One SEO Pack 4.8.3.1
• All in One SEO Pack 4.8.3.2
• All in One SEO Pack 4.8.4.1
• All in One SEO Pack 4.8.5
• All in One SEO Pack 4.8.6
• All in One SEO Pack 4.8.6.1
• All in One SEO Pack 4.8.7.2
• All in One SEO Pack 4.8.8
• All in One SEO Pack 4.8.9
• All in One SEO Pack 4.9.0
• All in One SEO Pack 4.9.1
• All in One SEO Pack 4.9.1.1
• All in One SEO Pack 4.9.2

Plugin is vulnerable to unauthorized arbitrary media attachment deletion due to a missing authorization check. This is due to the REST API endpoint `/wp-json/aioseo/v1/ai/image-generator` only verifying that users have the `edit_posts` capability (Contributors and above) without checking if they own or have permission to delete the specific media attachments.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.8.8
• All in One SEO Pack 4.8.9

This patch resolves by properly sanitizing the replytocom URL parameter, which was previously vulnerable to reflected XSS attacks. The updated code ensures that user-supplied input is safely handled, preventing malicious script injection and improving front-end security.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.3.7.1
• All in One SEO Pack 4.7.3
• All in One SEO Pack 4.7.4.1
• All in One SEO Pack 4.7.4.2
• All in One SEO Pack 4.7.5
• All in One SEO Pack 4.7.5.1
• All in One SEO Pack 4.7.6
• All in One SEO Pack 4.7.7
• All in One SEO Pack 4.7.7.1
• All in One SEO Pack 4.7.7.2
• All in One SEO Pack 4.7.8
• All in One SEO Pack 4.7.9
• All in One SEO Pack 4.7.9.1
• All in One SEO Pack 4.8.0
• All in One SEO Pack 4.8.1
• All in One SEO Pack 4.8.1.1

Due to insufficient input sanitization and output escaping, makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1
• All in One SEO Pack 4.5.4
• All in One SEO Pack 4.5.5
• All in One SEO Pack 4.5.6
• All in One SEO Pack 4.5.7.1
• All in One SEO Pack 4.5.7.2
• All in One SEO Pack 4.5.7.3
• All in One SEO Pack 4.5.8
• All in One SEO Pack 4.5.9.1
• All in One SEO Pack 4.5.9.2
• All in One SEO Pack 4.6.0

An authenticated user with contributor‐level access can insert malicious JavaScript into a shortcode field. Because input isn’t fully sanitized, that script is saved and later executed in the browser of anyone viewing the affected page—typically an administrator—allowing the attacker to steal session data, perform actions on behalf of higher‐privileged users, or inject further malicious content. This represents a stored cross‐site scripting (XSS) risk that can lead to full site compromise if left unaddressed.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1
• All in One SEO Pack 4.5.4
• All in One SEO Pack 4.5.5
• All in One SEO Pack 4.5.6
• All in One SEO Pack 4.5.7.1
• All in One SEO Pack 4.5.7.2
• All in One SEO Pack 4.5.7.3
• All in One SEO Pack 4.5.8
• All in One SEO Pack 4.5.9.1
• All in One SEO Pack 4.5.9.2
• All in One SEO Pack 4.6.0

User input is not properly sanitized in some components that exposes to an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1
• All in One SEO Pack 4.5.4
• All in One SEO Pack 4.5.5
• All in One SEO Pack 4.5.6
• All in One SEO Pack 4.5.7.1
• All in One SEO Pack 4.5.7.2
• All in One SEO Pack 4.5.7.3
• All in One SEO Pack 4.5.8
• All in One SEO Pack 4.5.9.1
• All in One SEO Pack 4.5.9.2
• All in One SEO Pack 4.6.0
• All in One SEO Pack 4.6.1.1
• All in One SEO Pack 4.6.2
• All in One SEO Pack 4.6.3
• All in One SEO Pack 4.6.4
• All in One SEO Pack 4.6.5
• All in One SEO Pack 4.6.6
• All in One SEO Pack 4.6.7.1
• All in One SEO Pack 4.6.8.1
• All in One SEO Pack 4.6.9
• All in One SEO Pack 4.6.9.1
• All in One SEO Pack 4.7.0

SQL injection in the common app

This vulnerability affects the following application versions:

• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1
• All in One SEO Pack 4.5.4
• All in One SEO Pack 4.5.5
• All in One SEO Pack 4.5.6
• All in One SEO Pack 4.5.7.1
• All in One SEO Pack 4.5.7.2
• All in One SEO Pack 4.5.7.3
• All in One SEO Pack 4.5.8
• All in One SEO Pack 4.5.9.1
• All in One SEO Pack 4.5.9.2
• All in One SEO Pack 4.6.0
• All in One SEO Pack 4.6.1.1
• All in One SEO Pack 4.6.2
• All in One SEO Pack 4.6.3
• All in One SEO Pack 4.6.4
• All in One SEO Pack 4.6.5
• All in One SEO Pack 4.6.6
• All in One SEO Pack 4.6.7.1
• All in One SEO Pack 4.6.8.1
• All in One SEO Pack 4.6.9
• All in One SEO Pack 4.6.9.1
• All in One SEO Pack 4.7.0

XSS in admin settings

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1
• All in One SEO Pack 4.5.4
• All in One SEO Pack 4.5.5
• All in One SEO Pack 4.5.6
• All in One SEO Pack 4.5.7.1
• All in One SEO Pack 4.5.7.2
• All in One SEO Pack 4.5.7.3
• All in One SEO Pack 4.5.8
• All in One SEO Pack 4.5.9.1
• All in One SEO Pack 4.5.9.2
• All in One SEO Pack 4.6.0
• All in One SEO Pack 4.6.1.1
• All in One SEO Pack 4.6.2
• All in One SEO Pack 4.6.3
• All in One SEO Pack 4.6.4
• All in One SEO Pack 4.6.5
• All in One SEO Pack 4.6.6
• All in One SEO Pack 4.6.7.1
• All in One SEO Pack 4.6.8.1
• All in One SEO Pack 4.6.9
• All in One SEO Pack 4.6.9.1
• All in One SEO Pack 4.7.0

App is vulnerable to users who dont have all administrative privileges on accessing admin settings. or modifying them.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1
• All in One SEO Pack 4.5.4
• All in One SEO Pack 4.5.5
• All in One SEO Pack 4.5.6
• All in One SEO Pack 4.5.7.1
• All in One SEO Pack 4.5.7.2
• All in One SEO Pack 4.5.7.3
• All in One SEO Pack 4.5.8
• All in One SEO Pack 4.5.9.1
• All in One SEO Pack 4.5.9.2
• All in One SEO Pack 4.6.0
• All in One SEO Pack 4.6.1.1
• All in One SEO Pack 4.6.2
• All in One SEO Pack 4.6.3
• All in One SEO Pack 4.6.4
• All in One SEO Pack 4.6.5
• All in One SEO Pack 4.6.6

In some cases an array can contain one or more arrays as items, this fix will make a recursive call to sanitize all values properly

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8
• All in One SEO Pack 4.2.9
• All in One SEO Pack 4.3.0
• All in One SEO Pack 4.3.1
• All in One SEO Pack 4.3.1.1
• All in One SEO Pack 4.3.2
• All in One SEO Pack 4.3.3
• All in One SEO Pack 4.3.4.1
• All in One SEO Pack 4.3.5
• All in One SEO Pack 4.3.6.1
• All in One SEO Pack 4.3.7
• All in One SEO Pack 4.3.8
• All in One SEO Pack 4.3.9
• All in One SEO Pack 4.4.0.1
• All in One SEO Pack 4.4.1
• All in One SEO Pack 4.4.2
• All in One SEO Pack 4.4.3
• All in One SEO Pack 4.4.4
• All in One SEO Pack 4.4.5.1
• All in One SEO Pack 4.4.6
• All in One SEO Pack 4.4.7
• All in One SEO Pack 4.4.7.1
• All in One SEO Pack 4.4.8
• All in One SEO Pack 4.4.9.1
• All in One SEO Pack 4.4.9.2
• All in One SEO Pack 4.5.0
• All in One SEO Pack 4.5.1.1
• All in One SEO Pack 4.5.2.1
• All in One SEO Pack 4.5.3.1

Some variables are not escaped properly to prevent an XSS attack

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1

some variables are not adequately escaped to prevent an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1
• All in One SEO Pack 4.2.7.1
• All in One SEO Pack 4.2.8

The page analysis is not properly sanitized against an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• All in One SEO Pack 4.2.4
• All in One SEO Pack 4.2.5.1
• All in One SEO Pack 4.2.6
• All in One SEO Pack 4.2.6.1

The action scheduler is not properly escaped against an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2
• All in One SEO Pack 4.2.3.1
• WPForms 1.5.9.1
• WPForms 1.5.9.4
• WPForms 1.5.9.5
• WPForms 1.6.0.1
• WPForms 1.6.0.2
• WPForms 1.6.1
• WPForms 1.6.2.2
• WPForms 1.6.2.3
• WPForms 1.6.3.1
• WPForms 1.6.4
• WPForms 1.6.4.1
• WPForms 1.6.5
• WPForms 1.6.6
• WPForms 1.6.7
• WPForms 1.6.7.1
• WPForms 1.6.7.2
• WPForms 1.6.7.3
• WPForms 1.6.8
• WPForms 1.6.8.1
• WP Mail SMTP 2.1.1
• WP Mail SMTP 2.2.1
• WP Mail SMTP 2.3.1
• WP Mail SMTP 2.4.0
• WP Mail SMTP 2.5.0
• WP Mail SMTP 2.5.1
• WP Mail SMTP 2.6.0
• WP Mail SMTP 2.7.0
• WP Mail SMTP 2.8.0
• WP Mail SMTP 2.9.0
• Email Subscribers & Newsletters 4.4.7
• Email Subscribers & Newsletters 4.4.8
• Email Subscribers & Newsletters 4.4.9
• Email Subscribers & Newsletters 4.4.10
• Email Subscribers & Newsletters 4.4.10.1
• Email Subscribers & Newsletters 4.5.0
• Email Subscribers & Newsletters 4.5.0.1
• Email Subscribers & Newsletters 4.5.1
• Email Subscribers & Newsletters 4.5.2
• Email Subscribers & Newsletters 4.5.3
• Email Subscribers & Newsletters 4.5.4
• Email Subscribers & Newsletters 4.5.5
• Email Subscribers & Newsletters 4.5.6
• Email Subscribers & Newsletters 4.6.0
• Email Subscribers & Newsletters 4.6.1
• Email Subscribers & Newsletters 4.6.2
• Email Subscribers & Newsletters 4.6.3
• Email Subscribers & Newsletters 4.6.4
• Email Subscribers & Newsletters 4.6.5
• Email Subscribers & Newsletters 4.6.6
• Email Subscribers & Newsletters 4.6.7
• Email Subscribers & Newsletters 4.6.8
• Email Subscribers & Newsletters 4.6.9
• Email Subscribers & Newsletters 4.6.10
• Email Subscribers & Newsletters 4.6.11
• Email Subscribers & Newsletters 4.6.12
• Email Subscribers & Newsletters 4.6.12.1
• Email Subscribers & Newsletters 4.6.13
• Email Subscribers & Newsletters 4.6.14
• Email Subscribers & Newsletters 4.7.0
• Email Subscribers & Newsletters 4.7.1
• Email Subscribers & Newsletters 4.7.2
• Email Subscribers & Newsletters 4.7.3
• Email Subscribers & Newsletters 4.7.4
• Email Subscribers & Newsletters 4.7.5
• Email Subscribers & Newsletters 4.7.5.1
• Email Subscribers & Newsletters 4.7.6
• Email Subscribers & Newsletters 4.7.7
• Email Subscribers & Newsletters 4.7.8
• Email Subscribers & Newsletters 4.7.9
• Email Subscribers & Newsletters 4.8.0
• Email Subscribers & Newsletters 4.8.1

Arguments are not properly sanitized to prevent an SQL injection vulnerability.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1
• All in One SEO Pack 4.1.0.2
• All in One SEO Pack 4.1.0.3
• All in One SEO Pack 4.1.1
• All in One SEO Pack 4.1.1.1
• All in One SEO Pack 4.1.1.2
• All in One SEO Pack 4.1.2.1
• All in One SEO Pack 4.1.2.2
• All in One SEO Pack 4.1.2.3
• All in One SEO Pack 4.1.3.1
• All in One SEO Pack 4.1.3.3
• All in One SEO Pack 4.1.3.4
• All in One SEO Pack 4.1.4.1
• All in One SEO Pack 4.1.4.2
• All in One SEO Pack 4.1.4.3
• All in One SEO Pack 4.1.4.4
• All in One SEO Pack 4.1.4.5
• All in One SEO Pack 4.1.5.1
• All in One SEO Pack 4.1.5.2
• All in One SEO Pack 4.1.5.3
• All in One SEO Pack 4.1.6.2
• All in One SEO Pack 4.1.7
• All in One SEO Pack 4.1.8
• All in One SEO Pack 4.1.9.1
• All in One SEO Pack 4.1.9.3
• All in One SEO Pack 4.1.9.4
• All in One SEO Pack 4.1.10
• All in One SEO Pack 4.2.0
• All in One SEO Pack 4.2.1.1
• All in One SEO Pack 4.2.2

If the serialized string contains an object code execution is terminated to avoid PHP object injection.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.15
• All in One SEO Pack 4.0.16
• All in One SEO Pack 4.0.17
• All in One SEO Pack 4.0.18
• All in One SEO Pack 4.1.0.1

Some files could be accessed directly and could cause a direct files access.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15

A range of common features weren’t properly escaped against XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7
• All in One SEO Pack 4.0.8
• All in One SEO Pack 4.0.9
• All in One SEO Pack 4.0.10
• All in One SEO Pack 4.0.12
• All in One SEO Pack 4.0.15

Escape special regex characters inside the replacement string to prevent XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 4.0.6
• All in One SEO Pack 4.0.7

The description wasn’t properly escaped against XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16
• All in One SEO Pack 2.4
• All in One SEO Pack 2.4.1
• All in One SEO Pack 2.4.1.1
• All in One SEO Pack 2.4.2
• All in One SEO Pack 2.4.2.1
• All in One SEO Pack 2.4.3
• All in One SEO Pack 2.4.3.1
• All in One SEO Pack 2.4.4
• All in One SEO Pack 2.4.4.1
• All in One SEO Pack 2.4.5
• All in One SEO Pack 2.4.5.1
• All in One SEO Pack 2.4.6
• All in One SEO Pack 2.4.6.1
• All in One SEO Pack 2.5
• All in One SEO Pack 2.6.1
• All in One SEO Pack 2.7.2
• All in One SEO Pack 2.7.3
• All in One SEO Pack 2.8
• All in One SEO Pack 2.9
• All in One SEO Pack 2.9.1
• All in One SEO Pack 2.9.1.1
• All in One SEO Pack 2.10
• All in One SEO Pack 2.10.1
• All in One SEO Pack 2.11
• All in One SEO Pack 2.12
• All in One SEO Pack 2.12.1
• All in One SEO Pack 3.0
• All in One SEO Pack 3.0.1
• All in One SEO Pack 3.0.2
• All in One SEO Pack 3.0.3
• All in One SEO Pack 3.0.4
• All in One SEO Pack 3.1
• All in One SEO Pack 3.1.1
• All in One SEO Pack 3.2
• All in One SEO Pack 3.2.1
• All in One SEO Pack 3.2.2
• All in One SEO Pack 3.2.3
• All in One SEO Pack 3.2.4
• All in One SEO Pack 3.2.5
• All in One SEO Pack 3.2.6
• All in One SEO Pack 3.2.7
• All in One SEO Pack 3.2.8
• All in One SEO Pack 3.2.9
• All in One SEO Pack 3.2.10
• All in One SEO Pack 3.3
• All in One SEO Pack 3.3.1
• All in One SEO Pack 3.3.1.1
• All in One SEO Pack 3.3.2
• All in One SEO Pack 3.3.3
• All in One SEO Pack 3.3.4
• All in One SEO Pack 3.3.5
• All in One SEO Pack 3.4.2
• All in One SEO Pack 3.4.3
• All in One SEO Pack 3.5.2
• All in One SEO Pack 3.6.1
• All in One SEO Pack 3.6.2
• All in One SEO Pack 3.7.0

Several parts in opengraph weren’t properly sanitized against XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16
• All in One SEO Pack 2.4
• All in One SEO Pack 2.4.1
• All in One SEO Pack 2.4.1.1
• All in One SEO Pack 2.4.2
• All in One SEO Pack 2.4.2.1
• All in One SEO Pack 2.4.3
• All in One SEO Pack 2.4.3.1
• All in One SEO Pack 2.4.4
• All in One SEO Pack 2.4.4.1
• All in One SEO Pack 2.4.5
• All in One SEO Pack 2.4.5.1
• All in One SEO Pack 2.4.6
• All in One SEO Pack 2.4.6.1
• All in One SEO Pack 2.5
• All in One SEO Pack 2.6.1
• All in One SEO Pack 2.7.2
• All in One SEO Pack 2.7.3
• All in One SEO Pack 2.8
• All in One SEO Pack 2.9
• All in One SEO Pack 2.9.1
• All in One SEO Pack 2.9.1.1
• All in One SEO Pack 2.10
• All in One SEO Pack 2.10.1
• All in One SEO Pack 2.11
• All in One SEO Pack 2.12
• All in One SEO Pack 2.12.1
• All in One SEO Pack 3.0
• All in One SEO Pack 3.0.1
• All in One SEO Pack 3.0.2
• All in One SEO Pack 3.0.3
• All in One SEO Pack 3.0.4
• All in One SEO Pack 3.1
• All in One SEO Pack 3.1.1
• All in One SEO Pack 3.2
• All in One SEO Pack 3.2.1
• All in One SEO Pack 3.2.2
• All in One SEO Pack 3.2.3
• All in One SEO Pack 3.2.4
• All in One SEO Pack 3.2.5
• All in One SEO Pack 3.2.6
• All in One SEO Pack 3.2.7
• All in One SEO Pack 3.2.8
• All in One SEO Pack 3.2.9
• All in One SEO Pack 3.2.10
• All in One SEO Pack 3.3
• All in One SEO Pack 3.3.1
• All in One SEO Pack 3.3.1.1
• All in One SEO Pack 3.3.2
• All in One SEO Pack 3.3.3
• All in One SEO Pack 3.3.4
• All in One SEO Pack 3.3.5
• All in One SEO Pack 3.4.2
• All in One SEO Pack 3.4.3
• All in One SEO Pack 3.5.2
• All in One SEO Pack 3.6.1
• All in One SEO Pack 3.6.2

The save tax data option wasn’t properly escaped against XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16
• All in One SEO Pack 2.4
• All in One SEO Pack 2.4.1
• All in One SEO Pack 2.4.1.1
• All in One SEO Pack 2.4.2
• All in One SEO Pack 2.4.2.1
• All in One SEO Pack 2.4.3
• All in One SEO Pack 2.4.3.1
• All in One SEO Pack 2.4.4
• All in One SEO Pack 2.4.4.1
• All in One SEO Pack 2.4.5
• All in One SEO Pack 2.4.5.1
• All in One SEO Pack 2.4.6
• All in One SEO Pack 2.4.6.1
• All in One SEO Pack 2.5
• All in One SEO Pack 2.6.1
• All in One SEO Pack 2.7.2
• All in One SEO Pack 2.7.3
• All in One SEO Pack 2.8
• All in One SEO Pack 2.9
• All in One SEO Pack 2.9.1
• All in One SEO Pack 2.9.1.1
• All in One SEO Pack 2.10
• All in One SEO Pack 2.10.1
• All in One SEO Pack 2.11
• All in One SEO Pack 2.12
• All in One SEO Pack 2.12.1
• All in One SEO Pack 3.0
• All in One SEO Pack 3.0.1
• All in One SEO Pack 3.0.2
• All in One SEO Pack 3.0.3
• All in One SEO Pack 3.0.4
• All in One SEO Pack 3.1
• All in One SEO Pack 3.1.1
• All in One SEO Pack 3.2
• All in One SEO Pack 3.2.1
• All in One SEO Pack 3.2.2
• All in One SEO Pack 3.2.3
• All in One SEO Pack 3.2.4
• All in One SEO Pack 3.2.5
• All in One SEO Pack 3.2.6
• All in One SEO Pack 3.2.7
• All in One SEO Pack 3.2.8
• All in One SEO Pack 3.2.9
• All in One SEO Pack 3.2.10
• All in One SEO Pack 3.3
• All in One SEO Pack 3.3.1
• All in One SEO Pack 3.3.1.1
• All in One SEO Pack 3.3.2
• All in One SEO Pack 3.3.3
• All in One SEO Pack 3.3.4
• All in One SEO Pack 3.3.5
• All in One SEO Pack 3.4.2
• All in One SEO Pack 3.4.3
• All in One SEO Pack 3.5.2
• All in One SEO Pack 3.6.1

The updated quick edit value wasn’t properly sanitized against XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 3.4.2
• All in One SEO Pack 3.4.3
• All in One SEO Pack 3.5.2
• All in One SEO Pack 3.6.1

Before enqueue stylesheets used for the frontend a permission check was missing to prevent unauthenticated usage.

This vulnerability affects the following application versions:

• All in One SEO Pack 3.4.2

Description format was not properly sanitized against XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16
• All in One SEO Pack 2.4
• All in One SEO Pack 2.4.1
• All in One SEO Pack 2.4.1.1
• All in One SEO Pack 2.4.2
• All in One SEO Pack 2.4.2.1
• All in One SEO Pack 2.4.3
• All in One SEO Pack 2.4.3.1
• All in One SEO Pack 2.4.4
• All in One SEO Pack 2.4.4.1
• All in One SEO Pack 2.4.5
• All in One SEO Pack 2.4.5.1
• All in One SEO Pack 2.4.6
• All in One SEO Pack 2.4.6.1
• All in One SEO Pack 2.5
• All in One SEO Pack 2.6.1
• All in One SEO Pack 2.7.2
• All in One SEO Pack 2.7.3
• All in One SEO Pack 2.8
• All in One SEO Pack 2.9
• All in One SEO Pack 2.9.1
• All in One SEO Pack 2.9.1.1
• All in One SEO Pack 2.10
• All in One SEO Pack 2.10.1
• All in One SEO Pack 2.11
• All in One SEO Pack 2.12
• All in One SEO Pack 2.12.1
• All in One SEO Pack 3.0
• All in One SEO Pack 3.0.1
• All in One SEO Pack 3.0.2
• All in One SEO Pack 3.0.3
• All in One SEO Pack 3.0.4
• All in One SEO Pack 3.1
• All in One SEO Pack 3.1.1
• All in One SEO Pack 3.2
• All in One SEO Pack 3.2.1
• All in One SEO Pack 3.2.2
• All in One SEO Pack 3.2.3
• All in One SEO Pack 3.2.4
• All in One SEO Pack 3.2.5
• All in One SEO Pack 3.2.6

The XML safe was not properly escaped this could result in an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.10
• All in One SEO Pack 2.10.1

Image attributes were not properly escaped this could result in an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.9
• All in One SEO Pack 2.3.9.1
• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16
• All in One SEO Pack 2.4
• All in One SEO Pack 2.4.1
• All in One SEO Pack 2.4.1.1
• All in One SEO Pack 2.4.2
• All in One SEO Pack 2.4.2.1
• All in One SEO Pack 2.4.3
• All in One SEO Pack 2.4.3.1
• All in One SEO Pack 2.4.4
• All in One SEO Pack 2.4.4.1
• All in One SEO Pack 2.4.5
• All in One SEO Pack 2.4.5.1
• All in One SEO Pack 2.4.6
• All in One SEO Pack 2.4.6.1
• All in One SEO Pack 2.5
• All in One SEO Pack 2.6.1
• All in One SEO Pack 2.7.2
• All in One SEO Pack 2.7.3
• All in One SEO Pack 2.8
• All in One SEO Pack 2.9
• All in One SEO Pack 2.9.1
• All in One SEO Pack 2.9.1.1

The description was likely vulnerable to XSS.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.9
• All in One SEO Pack 2.3.9.1
• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5

The image URL was cleaned against an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16
• All in One SEO Pack 2.4
• All in One SEO Pack 2.4.1
• All in One SEO Pack 2.4.1.1

No proper decoding of title, description and title length could result to an XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.9
• All in One SEO Pack 2.3.9.1
• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16

The content of the post was not properly stripped against to HTML tags.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1

The post prefix url was not properly sanitised and validated.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.3.5
• All in One SEO Pack 2.3.5.1
• All in One SEO Pack 2.3.6
• All in One SEO Pack 2.3.6.1
• All in One SEO Pack 2.3.7
• All in One SEO Pack 2.3.8
• All in One SEO Pack 2.3.9
• All in One SEO Pack 2.3.9.1
• All in One SEO Pack 2.3.9.2
• All in One SEO Pack 2.3.10
• All in One SEO Pack 2.3.10.1
• All in One SEO Pack 2.3.10.2
• All in One SEO Pack 2.3.11
• All in One SEO Pack 2.3.11.1
• All in One SEO Pack 2.3.11.2
• All in One SEO Pack 2.3.11.3
• All in One SEO Pack 2.3.11.4
• All in One SEO Pack 2.3.12
• All in One SEO Pack 2.3.12.1
• All in One SEO Pack 2.3.12.2
• All in One SEO Pack 2.3.12.2.1
• All in One SEO Pack 2.3.12.3
• All in One SEO Pack 2.3.12.4
• All in One SEO Pack 2.3.12.5
• All in One SEO Pack 2.3.13
• All in One SEO Pack 2.3.13.1
• All in One SEO Pack 2.3.13.2
• All in One SEO Pack 2.3.14
• All in One SEO Pack 2.3.14.1
• All in One SEO Pack 2.3.14.2
• All in One SEO Pack 2.3.15
• All in One SEO Pack 2.3.15.1
• All in One SEO Pack 2.3.15.2
• All in One SEO Pack 2.3.15.3
• All in One SEO Pack 2.3.16
• All in One SEO Pack 2.4
• All in One SEO Pack 2.4.1
• All in One SEO Pack 2.4.1.1
• All in One SEO Pack 2.4.2
• All in One SEO Pack 2.4.2.1
• All in One SEO Pack 2.4.3
• All in One SEO Pack 2.4.3.1
• All in One SEO Pack 2.4.4
• All in One SEO Pack 2.4.4.1
• All in One SEO Pack 2.4.5
• All in One SEO Pack 2.4.5.1
• All in One SEO Pack 2.4.6
• All in One SEO Pack 2.4.6.1
• All in One SEO Pack 2.5
• All in One SEO Pack 2.6.1
• All in One SEO Pack 2.7.2
• All in One SEO Pack 2.7.3

The AIOSP robots was not escaped against XSS attack.

This vulnerability affects the following application versions:

• All in One SEO Pack 2.7.2
• All in One SEO Pack 2.7.3
• All in One SEO Pack 2.8