FV Simpler SEO

FV Simpler SEO has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2025 and 2026; all 2 are fixed as of October 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for FV Simpler SEO has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. FV Simpler SEO is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all FV Simpler SEO vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-54868

FV Simpler SEO <= 1.9.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv1.9.8

FV Simpler SEO

FolioVision

Author

FolioVision

4.6(12)
92/100
Last Updated
2026-10-13 (15d ago)
Active Installs
2,000+
Downloads
194,113
Requires WP
3.4+
Requires PHP
0+
Tested up to
WP 7.1.3
Created
2009-10-19 (17y ago)

A simplified version of All in One SEO Pack! Streamlined interface with no keywords field. Option to turn off excerpts and automated descriptions. Far better for pure SEO and for client use. Check screenshots. Optimizes your WordPress blog for Search Engines (Search Engine Optimization). If upgrading from All in One SEO Pack, please back up your database first! Support | Change Log | Some features: Shorten long post slugs to 3 longest keywords when creating new post in the Classic Editor Get warning about missing title and meta description when creating new post in the Classic Editor support for Google authorship and publisher fields support for Facebook Open Graph and Twitter Cards Canonical URLs Fine tune Page Navigational Links Built-in API so other plugins/themes can access and extend functionality Provides SEO Integration for WP e-Commerce sites Support for CMS-style WordPress installations Automatically optimizes your titles for search engines Generates META tags automatically Avoids the typical duplicate content found on WordPress blogs For beginners, you don’t even have to look at the options, it works out-of-the-box. Just install. For advanced users, you can fine-tune everything You can override any title and set any META description and any META keywords you want. Backward-Compatibility with many other plugins, like Auto Meta, Ultimate Tag Warrior and others. Support for qTranslate noindex and nofollow for each post (also excludes post from search and link rel prev/next attributes)

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C