All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) vulnerabilities

Product

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

by smub · last CVE Oct 31, 2026

CVEs

On KEV

6.5

Max CVSS

New 30D

Vulnerabilities3 In the news0 Timeline

Severity mix

Critical 0High 0Medium 3Low 0

Severity

All severities3 Critical0 High0 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-100152	6.5	0%	Oct 3	All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Query Parameter Affected: through 5.0.2
CVE-2026-85492	6.1	0%	Oct 2	All in One SEO <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting via URL Pathname Affected: through 5.0.1.1
CVE-2026-109367 New	5.3	0%	Oct 31	All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parameter Affected: through 5.0.3