Now officially on WordPress.org

CVE Database / CVE-2025-58650

CVE · Medium

CVE-2025-58650 — All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.8.7.2

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-58650 All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.8.7.2 — Medium 5.4 < 4.8.7.2 4.8.7.2 2025-09-22 —

CVE-2025-58650

A security flaw exists in the All In One SEO Pack plugin for WordPress due to inadequate permission checks on a specific function within versions prior to or equal to 4.8.7.1. As a result, users possessing contributor-level privileges can execute an unauthorized operation without proper authorization. This vulnerability is exploitable by authenticated attackers.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings