Baiduseo Vulnerabilities & Security Issues

SEO合集(支持百度/Google/Bing/头条推送) [baiduseo] <= 2.1.3 (unfixed)

unknown

[en] Missing Authorization vulnerability in 沃之涛百度站长SEO合集(支持百度/神马/Bing/头条推送) baiduseo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 百度站长SEO合集(支持百度/神马/Bing/头条推送): from n/a through <= 2.1.3.

Affected:: up to 2.1.3
Fix:: No patched version reported
Disclosed:: Oct 27, 2025

CVE-2025-62977 on NVD →

百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.1.4 - Missing Authorization

medium

The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.1.4. This makes it possible for unauthenticated attackers to perform an unauthorized action.

CVSS:: 5.3
Affected:: up to 2.1.4
Fixed in:: 2.1.5
Disclosed:: Oct 19, 2025

CVE-2025-62977 on NVD →

百度站长SEO合集(支持百度/神马/Bing/头条推送) <= 2.0.6 - Unauthenticated Arbitrary File Upload

critical

The 百度站长SEO合集(支持百度/神马/Bing/头条推送) plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download_remote_image_to_media_library function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to upload arbitrary f...

CVSS:: 9.8
Affected:: up to 2.0.6
Fixed in:: 2.0.7
Disclosed:: May 14, 2025

CVE-2025-3917 on NVD →

SEO合集(支持百度/Google/Bing/头条推送) [baiduseo] <= 2.0.6 (unfixed)