Log in Start free

rainbowgeek

Products

ProductCVEsExploitedLatest
SEOPress – AI SEO Plugin & On-site SEO4–Nov 7, 2026
SEOPress – On-site SEO & Analytics4–Oct 2, 2024

Exploited and recent CVEs

  • CVE-2026-120515 Medium 6.4 SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' Parameters –
  • CVE-2026-116535 Medium 6.4 SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag 0.2%
  • CVE-2026-101357 Medium 4.9 SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' Parameter 0.2%
  • CVE-2026-96564 High 7.2 SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display Name 0.2%
  • CVE-2024-9225 Medium 6.1 SEOPress – On-site SEO <= 8.1.1 - Reflected Cross-Site Scripting 0.5%
  • CVE-2024-1168 Medium 6.4 SEOPress – On-site SEO <= 7.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL 0.4%
  • CVE-2024-1134 Medium 6.4 SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-2165 Medium 6.4 SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Author+) Stored Cross-Site Scripting 0.4%