Plugin icon

Xagio SEO – AI Powered SEO

xagio-seo

Vulnerabilities:

6

Last Updated:

May 20, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-03-12
Title
Xagio SEO – AI Powered SEO < 7.1.0.31 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 7.1.0.31
CVSS
9.8 (critical)
Published
2026-01-05
Title
Xagio SEO < 7.1.0.31 - Authenticated (Subscriber+) Server-Side Request Forgery
Fixed in
Fixed in 7.1.0.31
CVSS
6.4 (medium)
Published
2025-12-04
Title
Xagio SEO < 7.1.0.38 - Missing Authorization
Fixed in
Fixed in 7.1.0.38
CVSS
4.3 (medium)
Published
2025-08-27
Title
Xagio SEO < 7.1.0.6 - Unauthenticated Sensitive Information Exposure via Unprotected Back-Up Files
Fixed in
Fixed in 7.1.0.6
CVSS
7.5 (high)
Published
2025-06-10
Title
Xagio SEO < 7.1.0.17 - Unauthenticated Stored Cross-Site Scripting via 'HTTP_REFERER'
Fixed in
Fixed in 7.1.0.17
CVSS
7.2 (high)
Published
2025-01-24
Title
Xagio SEO < 7.0.0.21 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 7.0.0.21
CVSS
6.4 (medium)