Improve SEO

Improve SEO has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.

The most common weakness is Unrestricted Upload Of File With Dangerous Type, behind 1 of the records (100%).

The one issue recorded for Improve SEO has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by João Ramos Maciel. Improve SEO is installed on roughly 10 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSCritical
9.8/ 10
Patch Coverage0%
Open

1

Fixed

0

Get automatic notifications for all Improve SEO vulnerabilities before they are exploited.

Most severe open issueCVSS 9.8CVE-2026-16618

ImproveSEO <= 2.0.11 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

1 records
Showing 1–1 of 1 reports
Plugin Profile
Latestv2.0.13
0.0(0)
0/100
Last Updated
2026-08-28 (2mo ago)
Active Installs
10+
Downloads
1,053
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 7.1.3
Created
2026-02-25 (8mo ago)

Improve SEO generates SEO-focused posts and pages for your WordPress site. Give it a keyword and it produces a full article — title, body, meta title and meta description — with an optional AI-generated cover image. Features: Single-post generation with a guided, step-by-step wizard. Bulk generation from a keyword list, with scheduled drip-feed publishing. AI cover images, generated from the post title or from your own prompt. Regenerate content or images, optionally with your own custom instructions. Meta title and meta description generated within SEO length limits, and written to Yoast, Rank Math or SEOPress when one of those is active. FAQ sections emitted as structured blocks with matching FAQPage JSON-LD schema. Shortcodes for testimonials, buttons, Google Maps embeds and videos. Keyword research and saved keyword lists. External services This plugin relies on the ImproveSEO content generation service to create posts, images and keyword suggestions. Using the plugin’s generation features requires an account. Service: ImproveSEO API — https://imporve-seo-admin-server-nzbm.onrender.com What is sent, and when: when you generate or regenerate content, the plugin sends your seed keyword, chosen title, article length, language, tone, point of view, niche selections, call to action, any custom instruction you type, and your site’s API key and site code. When you generate an image it sends the post title or your image prompt, the niche, and your business city if you set one during onboarding. Nothing is sent until you start a generation. Terms of service: https://improveseoplugin.com/terms Privacy policy: https://improveseoplugin.com/privacy The plugin also loads Google Fonts (Lato, Poppins) on its admin dashboard screen from https://fonts.googleapis.com, and Google Maps from https://maps.googleapis.com when you use the Google Maps shortcode, which requires your own Google Maps API key.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C