Medium severity6.5NVD Advisory· Published Jan 17, 2022· Updated Jun 17, 2026
CVE-2021-25037
CVE-2021-25037
Description
The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileged information from the affected site’s database (e.g., usernames and hashed passwords).
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <4.1.5.3
Patches
Vulnerability mechanics
References
3- plugins.trac.wordpress.org/changeset/2640944/all-in-one-seo-pack/trunk/app/Common/Api/PostsTerms.phpnvdPatchVendor Advisory
- jetpack.com/2021/12/14/severe-vulnerabilities-fixed-in-all-in-one-seo-plugin-version-4-1-5-3/nvdExploitThird Party Advisory
- wpscan.com/vulnerability/4cd2a57b-3e1a-4acf-aecb-201ed9f4ee6dnvdExploitVendor Advisory
News mentions
0No linked articles in our index yet.