CVE-2025-58649

19th percentile - higher than 19% of all known CVEs

The All In One SEO Pack plugin (versions up to and including 4.8.7.1) contains an Insertion of Sensitive Information Into Sent Data vulnerability that allows retrieval of embedded sensitive data. An attacker may gain access to information that should not be disclosed.

An attacker could read sensitive data embedded in sent responses, potentially leading to disclosure of confidential information.

Update the All In One SEO Pack plugin to a version newer than 4.8.7.1 as soon as a fix is available. Until then, consider restricting site access or disabling the plugin.