CVE-2021-25037

CVE-2021-25037: All In One SEO < 4.1.5.3 - Authenticated SQL Injection

Vendor Unknown
Product All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
Weakness CWE-89 · SQLi
Published January 17, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileged information from the affected site’s database (e.g., usernames and hashed passwords).

Key dates

02Disclosure timeline

January 17, 2022 CVE published
August 3, 2024 Record updated