Skip to content
OpenAdvisories

Vendor

rainbowgeek

8 known vulnerabilities.

Products

SEOPress – On-site SEO & Analytics 4 SEOPress – AI SEO Plugin & On-site SEO 4
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-120515

    SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' Parameters

    The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' settings in versions up to, and including, 10…

    rainbowgeek SEOPress – AI SEO Plugin & On-site SEO Web / CMS
  • Medium 6.4
    CVE-2026-116535

    SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag

    The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and including, 10.3 due to insufficient input sanitization and output escaping. This makes it …

    rainbowgeek SEOPress – AI SEO Plugin & On-site SEO Web / CMS
  • Medium 4.9
    CVE-2026-101357

    SEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' Parameter

    The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'seopress_google_analytics_matomo_id' parameter in all versions up to, and including, 10.2 due to insufficient input sanitization and output e…

    rainbowgeek SEOPress – AI SEO Plugin & On-site SEO Web / CMS
  • Medium 6.1
    CVE-2024-9225

    SEOPress – On-site SEO <= 8.1.1 - Reflected Cross-Site Scripting

    The SEOPress – On-site SEO plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 8.1.1. This makes it possible for …

    rainbowgeek SEOPress – On-site SEO & Analytics Web / CMS
  • Medium 6.4
    CVE-2024-1168

    SEOPress – On-site SEO <= 7.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Social Image URL

    The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's social image URL in all versions up to, and including, 7.9 due to insufficient input sanitization and output escaping on user supplied image URLs. Th…

    rainbowgeek SEOPress – On-site SEO & Analytics Web / CMS
  • Medium 6.4
    CVE-2024-1134

    SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the SEO title and description parameters as well as others in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output escapin…

    rainbowgeek SEOPress – On-site SEO & Analytics Web / CMS
  • Medium 6.4
    CVE-2024-2165

    SEOPress – On-site SEO <= 7.5.2.1 - Authenticated (Author+) Stored Cross-Site Scripting

    The SEOPress – On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image alt parameter in all versions up to, and including, 7.5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authe…

    rainbowgeek SEOPress – On-site SEO & Analytics Web / CMS