CVE-2020-35946

MEDIUM 5.4CVE-2020-35946 · Published 01/01/2021 · updated 17/06/2026

In short

CVE-2020-35946 is a MEDIUM (CVSS 5.4) vulnerability affecting all in one seo pack (semperplugins).
Chance of exploitation in the next 30 days (EPSS): 0.85%, higher than 58.3% of all vulnerabilities.
Fix: update to 3.6.2 or later.

Package	Affected versions	Patched versions
all in one seo pack semperplugins	`< 3.6.2`	`3.6.2`

Description

An issue was discovered in the All in One SEO Pack plugin before 3.6.2 for WordPress. The SEO Description and Title fields are vulnerable to unsanitized input from a Contributor, leading to stored XSS.

References

wpscan.com/vulnerability/10320 · Exploit
wordfence.com/blog/2020/07/2-million-users-affected-by-vulnerability-in-all-in-one-seo-pack · Exploit

More vulnerabilities in all in one seo pack

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free