CVE Database /
CVE-2026-5075
CVE · Medium
CVE-2026-5075 — All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.9.7.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-5075
|
All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) [all-in-one-seo-pack] < 4.9.7.1 |
Exposure of Sensitive Information to an Unauthorized Actor |
Medium
4.3
|
< 4.9.7.1
|
4.9.7.1 |
2026-05-19 |
—
|
CVE-2026-5075
The All in One SEO plugin for WordPress contains a security flaw that allows unauthorized disclosure of sensitive information. In versions up to 4.9.7, the plugin inadvertently exposes internal option data when it's used in post editor contexts, making it accessible to users with contributor-level access or higher through page source inspection. This vulnerability enables attackers to view API/OAuth tokens and license details.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings