SEOPress vulnerabilities
We track 3 vulnerabilities in SEOPress products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 4, 2026.
Latest SEOPress vulnerabilities
- 7.1 High severity
SEOPress: Improper Neutralization of Input During Web Page Generation
The SEOPress WordPress plugin before 10.4 does not sanitise and escape some of its analytics tracking settings before outputting them in an inline script printed on every front-end page, allowing users granted a SEOPress WordPress plugin before 10.4 capability
- 9.8 Critical severity
SEOPress: Deserialization of Untrusted Data
The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a su
- 7.2 High severity
SEOPress: Deserialization of Untrusted Data
The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.