{
 "id": "WPSEC-2026-1531",
 "url": "https://wpsec.com/vuln/WPSEC-2026-1531/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-1531/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-1531/index.md",
 "title": "All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Exposure via Smart Tag Injection in Search Query and Request URL",
 "description": "The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via smart tag injection in all versions up to, and including, 5.0.3. This is due to the search query and the raw request path being placed into the schema title, description and URL without encoding the smart tag denotation character, and that output then being parsed again for smart tags. This makes it possible for unauthenticated attackers to inject smart tags such as custom field tags into a search string or URL path and have the rendered JSON-LD schema expand them, exposing post meta values and other data resolved by smart tags.",
 "plugin": {
  "slug": "all-in-one-seo-pack",
  "name": "All in One SEO",
  "full_name": "All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)",
  "wordpress_org": "https://wordpress.org/plugins/all-in-one-seo-pack/",
  "advisories_url": "https://wpsec.com/vuln/plugin/all-in-one-seo-pack/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/all-in-one-seo-pack"
 },
 "type": "SENSITIVE DATA DISCLOSURE",
 "cwe": [
  "CWE-74"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 5.3,
  "vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
  "severity": "Medium"
 },
 "affected": {
  "ranges": [
   {
    "from": null,
    "from_inclusive": true,
    "to": "5.0.4",
    "to_inclusive": false
   }
  ],
  "text": [
   "all versions before 5.0.4"
  ]
 },
 "introduced_in": null,
 "fixed_in": "5.0.4",
 "remediation": "Update to 5.0.4 or later.",
 "fix_released": "2026-10-22T15:06:21+00:00",
 "published": "2026-10-23T15:46:20+00:00",
 "updated": "2026-10-23T09:45:17.598337+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-1531/",
  "https://plugins.svn.wordpress.org/all-in-one-seo-pack/tags/5.0.4/",
  "https://wordpress.org/plugins/all-in-one-seo-pack/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/all-in-one-seo-pack",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "High",
  "affected_versions": "High",
  "as_of": "2026-10-23"
 }
}