Plugin icon

Search Atlas SEO – OTTO AI SEO Automation for WordPress

metasync

Vulnerabilities:

8

Last Updated:

October 7, 2026

Active Installs:

8000

Published
Title
Fixed in
CVSS
Published
2026-09-18
Title
Search Atlas SEO < 2.6.24 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification via handle_whitelabel_password_early Function
Fixed in
Fixed in 2.6.24
CVSS
4.3 (medium)
Published
2026-09-18
Title
Search Atlas SEO < 2.6.24 - Missing Authorization to Authenticated (Subscriber+) Site-Wide Option Modification via 'metasync_post_types' Parameter
Fixed in
Fixed in 2.6.24
CVSS
4.3 (medium)
Published
2026-09-03
Title
Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
Fixed in
Fixed in 2.6.24
CVSS
5.4 (medium)
Published
2026-07-10
Title
Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access
Fixed in
Fixed in 2.6.12
CVSS
5.4 (medium)
Published
2026-07-01
Title
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization < 2.6.7 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.6.7
CVSS
6.1 (medium)
Published
2026-01-27
Title
Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization 2.4.4 - 2.5.15 - Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover
Fixed in
Fixed in 2.5.16
CVSS
8.8 (high)
Published
2025-09-22
Title
Search Atlas SEO < 2.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 2.5.5
CVSS
6.4 (medium)
Published
2024-09-30
Title
Search Atlas SEO < 1.8.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.8.3
CVSS
4.4 (medium)