Vulnerabilities / SEOPress
SEOPress vulnerabilities
Advisories WPSec published for SEOPress – AI SEO Plugin & On-site SEO. Other sources may list more. Its attack surface: SEOPress on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-30 | WPSEC-2026-2010 | SEOPress <= 10.3 - Authenticated (Contributor+) PHP Object Injection via Content Analysis Data | High 7.5 | 10.4 |
| 2026-10-30 | WPSEC-2026-2009 | SEOPress <= 10.3 - Authenticated (Contributor+) Insecure Direct Object Reference to Robots Meta, Redirection and Image Attribute Modification via Bulk Actions | Medium 4.3 | 10.4 |
| 2026-10-30 | WPSEC-2026-2008 | SEOPress <= 10.3 - Authenticated (Editor+) Sensitive Information Exposure via Custom Field Dynamic Variables | Low 2.7 | 10.4 |
License: CC BY 4.0