All In One SEO Pack

Authenticated (Contributor+) Stored CrossSite Scripting via Post Meta Description and Canonical URL vulnerability <= 4.8.1.1

Authenticated (Contributor+) Stored CrossSite Scripting via Shortcode vulnerability <= 4.6.0

Authenticated (Administrator+) Stored CrossSite Scripting vulnerability <= 4.2.9

Authenticated (Contributor+) Stored CrossSite Scripting vulnerability <= 4.2.9

Multiple CrossSite Request Forgery (CSRF) vulnerabilities <= 4.2.3.1