CVE Explorer

CVE-2026-5075

The All in One SEO plugin for WordPress is vulnerable to Sensitive Information Exposure via 'internalOptions' localized script data in versions up to, and including, 4.9.7 due to sensitive internal option data being passed to wp_localize_script() in post editor contexts without effective masking for low-privilege users. This makes it possible for authenticated attackers, with contributor-level access and above, to view configured API/OAuth tokens and license-related values from page source.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:16d7993292e0a9c68a600b0e16442fb496f9b0f8f269313b0c8efc820de8eeee

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Affected products and versions

1 source assertion

{"defaultStatus":"unaffected","product":"All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic","vendor":"smub","versions":[{"lessThanOrEqual":"4.9.7","status":"affected","version":"0","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:6627175f815e86e069a8d35ae52d8b23cdb4911ecab2325e0535492984192864 · sha256:c1df85c7e908d22d… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":4.3,"baseSeverity":"MEDIUM","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:6627175f815e86e069a8d35ae52d8b23cdb4911ecab2325e0535492984192864 · sha256:c1df85c7e908d22d… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:6627175f815e86e069a8d35ae52d8b23cdb4911ecab2325e0535492984192864 · sha256:c1df85c7e908d22d… · /containers/cna/problemTypes/0/descriptions/0

Source references

2 source assertions

{"url":"https://plugins.trac.wordpress.org/changeset/3532318/all-in-one-seo-pack"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6627175f815e86e069a8d35ae52d8b23cdb4911ecab2325e0535492984192864 · sha256:c1df85c7e908d22d… · /containers/cna/references/1

{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/0d8bc203-c17a-4b31-8f9e-695f9e638cda?source=cve"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:6627175f815e86e069a8d35ae52d8b23cdb4911ecab2325e0535492984192864 · sha256:c1df85c7e908d22d… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer