rainbowgeek SEOPress – AI SEO Plugin & On-site SEO

• CVE-2026-120515 Medium 6.4 SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' Parameters –
• CVE-2026-116535 Medium 6.4 SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag 0.2%
• CVE-2026-101357 Medium 4.9 SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' Parameter 0.2%
• CVE-2026-96564 High 7.2 SEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display Name 0.2%