https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-35946.htmlhttps://patchthecve.com/cve/CVE-2020-35946.htmlWed, 17 Jun 2026 03:14:39 +0000MEDIUM 5.4: An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.https://patchthecve.com/cve/CVE-2013-5988.htmlhttps://patchthecve.com/cve/CVE-2013-5988.htmlTue, 16 Jun 2026 23:59:50 +0000MEDIUM 6.1: A Cross-site Scripting (XSS) vulnerability exists in the All in One SEO Pack plugin before 2.0.3.1 for WordPress via the Search parameter.https://patchthecve.com/cve/CVE-2019-16520.htmlhttps://patchthecve.com/cve/CVE-2019-16520.htmlWed, 17 Jun 2026 02:22:21 +0000MEDIUM 5.4: The all-in-one-seo-pack plugin before 3.2.7 for WordPress (aka All in One SEO Pack) is susceptible to Stored XSS due to improper encoding of the SEO-specific description for posts provided by the plugin via unsafe placeholder replacement.