→ برگشت به فید آسیب‌پذیری‌ها CVE-2026-19856 · all-in-one-seo-pack

اجرای کدهای دلخواه (Code Execution) در افزونه All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

The All in One SEO plugin for WordPress is vulnerable to Arbitrary Shortcode Execution in all versions up to, and including, 5.0.2.0. This is due to the use of do_shortcode() on user supplied input. This makes it possible for unauthenticated attackers to execute arbitrary shortcodes registered on the site. The impact depends on which shortcodes the site has registered, so a site running a plugin whose shortcodes expose data or perform actions is affected more severely.