WordPress Plugin Vulnerabilities

All in One SEO Pack <= 2.1.5 - Unspecified Privilege Escalation

Description

The All in One SEO Pack WordPress plugin was affected by an Unspecified Privilege Escalation security vulnerability.

Affects Plugins

Plugin icon
all-in-one-seo-pack
Fixed in 2.1.6

References

URL
https://blog.sucuri.net/2014/05/vulnerability-found-in-the-all-in-one-seo-pack-wordpress-plugin.html

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287

Miscellaneous

Verified
No
WPVDB ID
3a79a32d-2744-41c5-8752-0540f744e25d

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-10-21 (about 6 years ago)

Other

Published
Title
Published
2022-06-21
Title
OAuth 2.0 client for SSO < 1.11.4 - Authenticated Bypass
Published
2024-05-07
Title
Social Connect <= 1.2 - Authentication Bypass
Published
2015-03-09
Title
MainWP Child <= 2.0.9.1 - Authentication Bypass
Published
2025-08-01
Title
Brave Conversion Engine (PRO) < 0.8.0 - Authentication Bypass
Published
2026-04-09
Title
Customer Reviews for WooCommerce < 5.104.0 - Unauthenticated Authentication Bypass to Arbitrary Review Submission via 'key' Parameter