All In One SEO Team vulnerabilities
2 vulnerabilities
Known vulnerabilities in All In One SEO Team products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- All In One SEO – Best Wordpress SEO Plugin – Easily Improve Your SEO Rankings1 vulnerabilities
- All In One SEO (Wordpress Plugin)1 vulnerabilities
CriticalCVE-2021-24307aioseo · all_in_one_seo +2 moreAll in One SEO Pack < 4.1.0.2 - Admin RCE via unserializeThe All in One SEO – Best WordPress SEO Plugin – Easily Improve Your SEO Rankings before 4.1.0.2 enables authenticated users with "aioseo_tools_settings" privilege (most of the time admin) to execute arbitrary code on the underlying host. Users can restore plugin's configuration by uploading a backup .ini file in the section "Tool > Import/Export". However, the plugin attempts to unserialize values of the .ini file. Moreover, the plugin embeds Monolog library which can be used to craft a gadget chain and thus trigger system command execution.EPSS53.27%HighCVE-2022-38093aioseo · all_in_one_seo +2 moreWordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitiesMultiple Cross-Site Request Forgery (CSRF) vulnerabilities in All in One SEO plugin <= 4.2.3.1 at WordPress.EPSS0.40%