Description
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in All in One SEO plugin <= 4.2.3.1 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| All in One SEO Team | All in One SEO (WordPress plugin) | ≤ 4.2.3.1 | — |
Medium · 5.4
CVE-2022-38093
EUVD-2022-40695GHSA-j349-c676-c255
WordPress All in One SEO plugin <= 4.2.3.1 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack