https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-35946.htmlhttps://patchthecve.com/cve/CVE-2020-35946.htmlWed, 17 Jun 2026 03:14:39 +0000MEDIUM 5.4: An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.https://patchthecve.com/cve/CVE-2013-5988.htmlhttps://patchthecve.com/cve/CVE-2013-5988.htmlTue, 16 Jun 2026 23:59:50 +0000MEDIUM 6.1: A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.https://patchthecve.com/cve/CVE-2019-16520.htmlhttps://patchthecve.com/cve/CVE-2019-16520.htmlWed, 17 Jun 2026 02:22:21 +0000MEDIUM 5.4: The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement.https://patchthecve.com/cve/CVE-2015-0902.htmlhttps://patchthecve.com/cve/CVE-2015-0902.htmlWed, 17 Jun 2026 00:21:07 +0000MEDIUM 5.0: The Semper Fi All in One SEO Pack plugin before 2.2.6 for WordPress does not consider the presence of password protection during generation of the Meta Description field, which allows remote attackers to obtain sensitive information by reading HTML source code.