CVE-2021-25037
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2021
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
All In One SEO < 4.1.5.3 - Authenticated SQL Injection
The All in One SEO WordPress plugin before 4.1.5.3 is affected by an authenticated SQL injection issue, which was discovered during an internal audit by the Jetpack Scan team, and could grant attackers access to privileged information from the affected site’s database (e.g., usernames and hashed passwords).
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
- Vendor
- Unknown
- Product
- All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.1.3.1 | affected | custom | 4.1.3.1* | Unavailable | None listed |
| 4.1.5.3 | affected | custom | 4.1.5.3 | Unavailable | None listed |