SEO Search Permalink
SEO Search Permalink has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for SEO Search Permalink has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.
All of these findings were reported by Nabil Irawan. SEO Search Permalink is installed on roughly 30 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.2.0.
CVE-2025-60184SEO Search Permalink <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

SEO Search Permalink
Author
Terry L.
Change default search URLs to SEO-friendly URLs, which may enhance your SERP rankings and increase your site traffic. The default URL ?s=keyword will be changed to /search/keyword, and you can adjust the {search base} as needed. SEO Search Permalink plugin provides four types of permalink structures, filtering out bad words and special characters from search terms. This results in truly clean search URLs for your site. SEO Search Permalink is an open-source project. For any questions or suggestions, please visit: https://github.com/terrylinooo/seo-search-permalink. Also, check out my Markdown edior plugin if you need a Markdown editor. Copyright SEO Search Permalink, Copyright 2018 TerryL.in SEO Search Permalink is distributed under the terms of the GNU GPL This program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C