Plugin icon

SEOPress – On-site SEO & Analytics

wp-seopress

Vulnerabilities:

14

Last Updated:

January 27, 2026

Active Installs:

300000

Published
Title
Fixed in
CVSS
Published
2024-10-24
Title
SEOPress < 8.2 - Missing Authorization
Fixed in
Fixed in 8.2
CVSS
4.3 (medium)
Published
2024-10-24
Title
SEOPress < 8.2 - Missing Authorization
Fixed in
Fixed in 8.2
CVSS
4.3 (medium)
Published
2024-10-24
Title
SEOPress < 8.2 - Missing Authorization
Fixed in
Fixed in 8.2
CVSS
5.3 (medium)
Published
2024-10-01
Title
SEOPress – On-site SEO < 8.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 8.2
CVSS
6.1 (medium)
Published
2024-06-19
Title
SEOPress – On-site SEO < 7.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL
Fixed in
Fixed in 7.9.1
CVSS
6.4 (medium)
Published
2024-06-18
Title
SEOPress < 7.9 - Unauthenticated Object Injection
Fixed in
Fixed in 7.9
CVSS
8.1 (high)
Published
2024-06-03
Title
SEOPress < 7.8 - Contributor+ Open Redirect
Fixed in
Fixed in 7.8
CVSS
2.7 (low)
Published
2024-06-03
Title
SEOPress < 7.8 - Contributor+ Stored XSS
Fixed in
Fixed in 7.8
CVSS
5.9 (medium)
Published
2024-05-23
Title
SEOPress < 7.6 - Contributor+ Stored XSS
Fixed in
Fixed in 7.6
CVSS
5.9 (medium)
Published
2024-05-03
Title
SEOPress < 7.7 - Information Exposure
Fixed in
Fixed in 7.7
CVSS
5.3 (medium)
Published
2024-03-22
Title
SEOPress – On-site SEO < 7.6 - Author+ Stored Cross-Site Scripting
Fixed in
Fixed in 7.6
CVSS
6.4 (medium)
Published
2023-12-26
Title
WP SEO Press < 7.3 - Admin+ Stored XSS
Fixed in
Fixed in 7.3
CVSS
3.5 (low)
Published
2023-04-10
Title
SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
Fixed in
Fixed in 6.5.0.3
CVSS
5.9 (medium)
Published
2021-08-16
Title
SEOPress 5.0.0 – 5.0.3 - Authenticated Stored Cross-Site Scripting
Fixed in
Fixed in 5.0.4
CVSS
5.4 (medium)