plugin

All In One Seo Pack Pro Vulnerabilities

2 known security issues reported for the All In One Seo Pack Pro WordPress plugin. Most recent disclosed Nov 8, 2022.

1 medium

Running All In One Seo Pack Pro on your site? Check whether your installed version is affected.

Scan your site free

All in One SEO Pro [all-in-one-seo-pack-pro] < 4.2.6

unknown

[en] Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.

Affected:: up to 4.2.6
Fixed in:: 4.2.6
Disclosed:: Nov 8, 2022

CVE-2022-42494 on NVD →

All in One SEO Pro <= 4.2.5.1 - Authenticated (Admin+) Server Side Request Forgery

medium

The All in One SEO Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 4.2.5.1 due to missing nonce checks and hostname validation. This makes it possible for authenticated users, with administrative privileges, to make web requests to arbitrary locations originating...

CVSS:: 5.5
Affected:: up to 4.2.5.1
Fixed in:: 4.2.6
Disclosed:: Oct 28, 2022

CVE-2022-42494 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database