CVE-2026-116535mediumCWE-79

CVE-2026-116535: falha de média gravidade em rainbowgeek SEOPress – AI SEO Plugin & On-site…

SEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Profile Field via %%archive_title%% Template Tag

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SEOPress – AI SEO Plugin & On-site SEO

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.4epss 0.2%
The SEOPress – AI SEO Plugin & On-site SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'display_name' parameter in all versions up to, and including, 10.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is exploitable by any Subscriber who sets their display_name to a string containing the literal %%archive_title%% token alongside HTML event-handler payloads, as WordPress stores display names without HTML filtering and the plugin substitutes the token after escaping has already occurred.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Produtos afetados
rainbowgeek · SEOPress – AI SEO Plugin & On-site SEO
CVEs relacionadas — rainbowgeek SEOPress – AI SEO Plugin & On-site…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-101357MEDIUMSEOPress <= 10.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_matomo_id' ParameterEPSS 0.2%CVE-2026-96564HIGHSEOPress <= 10.2 - Unauthenticated Stored Cross-Site Scripting via Author Display NameEPSS 0.2%CVE-2026-120515MEDIUMSEOPress <= 10.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'seopress_google_analytics_affiliate_tracking' and 'seopress_google_analytics_download_tracking' ParametersEPSS —