CVE-2021-25036: All In One SEO < 4.1.5.3 - Authenticated Privilege Escalation
Vulnerability summary
CVE-2021-25036 is a high (CVSS 8.8) Improper Handling of Case Sensitivity vulnerability in aioseo all_in_one_seo. EPSS estimates a 3.03% chance of exploitation in the next 30 days, higher than 87.3% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 17-01-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
The All in One SEO WordPress plugin before 4.1.5.3 is affected by a Privilege Escalation issue, which was discovered during an internal audit by the Jetpack Scan team, and may grant bad actors access to protected REST API endpoints they shouldn’t have access to. This could ultimately enable users with low-privileged accounts, like subscribers, to perform remote code execution on affected sites.
CVSS metrics
3 scores · 2 sources · 2 versions- wordfenceSource8.8HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
3.03%
Chance of exploitation in the next 30 days
Percentile
87%
Versus all other CVEs
30-day change
No change 0.00 pp
From 3.03% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundExploit Reference (wpscan.com)
Maturity: unknown
Exploit Reference (jetpack.com)
Maturity: unknown
Weaknesses
CWE · root cause- CWE-178Improper Handling of Case SensitivityThe product does not properly account for differences in case sensitivity when accessing or determining the properties of a resource, leading to inconsistent results.
- CWE-287Improper AuthenticationWhen an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Affected systems
Aioseo1 product
- all_in_one_seo< 4.1.5.3
Unknown1 product
- all in one seo – best wordpress seo plugin – easily improve seo rankings & increase traffic≥ 4.1.3.1, < 4.1.3.1* | ≥ 4.1.5.3, < 4.1.5.3
Wordpress1 product
- all-in-one-seo-pack≥ 4.0.0, ≤ 4.1.5.2 (fixed in 4.1.5.3)
3 vendors · 3 products
References
4 links- wpscan.com/vulnerability/6de4a7de-6b71-4349-8e52-04c89c5e6d6cX Refsource MISCExploitThird Party Advisory
- jetpack.com/2021/12/14/severe-vulnerabilities-fixed-in-all-in-one-seo-plugin-version-4-1-5-3/X Refsource MISCExploitThird Party Advisory
- plugins.trac.wordpress.org/changeset/2640944/all-in-one-seo-pack/trunk/app/Common/Api/Api.phpX Refsource CONFIRMPatchVendor Advisory