kcseopro
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WP SEO Structured Data Schema | 2 | – | May 12, 2026 |
| AdWords Conversion Tracking Code | 1 | – | Dec 31, 2025 |
Exploited and recent CVEs
- CVE-2026-3604 WP SEO Structured Data Schema <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_kcseo_ative_tab' Parameter 0.2%
- CVE-2025-62118 WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-4127 WP SEO Structured Data Schema <= 2.7.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via Plugin Settings 0.3%