plugin
2 known security issues reported for the Gzseo WordPress plugin. Most recent disclosed Mar 18, 2026.
Running Gzseo on your site? Check whether your installed version is affected.
Scan your site freeThe GZSEO plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 2.0.14. This makes it possible for unauthenticated attackers to perform an unauthorized action.
The GZSEO plugin for WordPress is vulnerable to authorization bypass leading to Stored Cross-Site Scripting in all versions up to, and including, 2.0.11. This is due to missing capability checks on multiple AJAX handlers combined with insufficient input sanitization and output escaping on the embed_code parameter. This...
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free