AISEO

AISEO has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 2 are fixed as of September 2026. Their average CVSS score is 5.8, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for AISEO has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. AISEO is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium
5.8/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all AISEO vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2024-34801

Praison SEO WordPress <= 4.0.15 - Authenticated (Author+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv5.0.9
3.6(5)
72/100
Last Updated
2026-08-05 (1mo ago)
Active Installs
1,000+
Downloads
136,966
Requires WP
5.0+
Requires PHP
7.4+
Tested up to
WP 6.9.7
Created
2012-04-14 (15y ago)

AISEO is a powerful AI-powered SEO plugin that helps you optimize your WordPress content using OpenAI’s GPT-4o-mini model. Automatically generate SEO-optimized meta titles, descriptions, schema markup, and get comprehensive content analysis. Key Features AI-Powered Meta Generation – Generate SEO-optimized titles and descriptions Content Analysis – 11 SEO metrics with actionable recommendations Schema Markup – Automatic JSON-LD schema generation Social Media Optimization – Open Graph and Twitter Card tags XML Sitemap – Automatic sitemap generation Image SEO – AI-powered alt text generation Bulk Operations – Edit multiple posts at once Import/Export – Migrate from Yoast, Rank Math, AIOSEO REST API – 60+ endpoints for developers WP-CLI – 70+ commands for automation AI-Powered Features Meta title generation (50-60 characters) Meta description generation (155-160 characters) Content analysis with 11 SEO metrics Image alt text generation FAQ generation from content Content outline generation Smart content rewriter (6 modes) Internal linking suggestions Content topic suggestions Technical SEO Schema markup (Article, BlogPosting, WebPage, FAQ, HowTo) Meta tags management Canonical URLs Robots meta tags Open Graph tags Twitter Card tags XML sitemap with smart caching 404 monitoring and redirects Developer Features 60+ REST API endpoints 70+ WP-CLI commands Comprehensive caching system Structured logging Performance optimized Fully documented External Services This plugin connects to the OpenAI API to provide AI-powered SEO features. Service Used: OpenAI API (https://api.openai.com/) Purpose: Generate SEO titles, meta descriptions, content analysis, and other AI-powered features. Data Sent: When you actively use AI generation features: * Post content (title and body) * Focus keyword (if specified) * User-specified parameters When Data is Sent: Only when you: * Click “Generate Title” or “Generate Description” * Run WP-CLI commands with AI generation * Call REST API endpoints for AI generation Privacy & Terms: * Privacy Policy: https://openai.com/policies/privacy-policy * Terms of Use: https://openai.com/policies/terms-of-use * API Data Usage: https://openai.com/policies/api-data-usage-policies User Control: The plugin only connects to OpenAI when you provide an API key and explicitly use AI generation features. No data is sent without your explicit action. External Services This plugin relies on the OpenAI API to provide its AI-powered features. It is required for any feature that generates or analyses content with AI. What it is used for: * Generating SEO meta titles, meta descriptions, and focus keywords * Generating content outlines, FAQs, briefs, and content suggestions * Rewriting and improving existing content * Generating image alt text (including image analysis via the vision model) * AI-assisted content and SEO analysis What data is sent and when: when you trigger one of the AI features listed above (manually from the post editor, the plugin admin screens, the REST API, or WP-CLI), the plugin sends the relevant post or image content, and where applicable the focus keyword, to the OpenAI API. No data is sent unless you trigger one of these features, and no data is sent to any service operated by the plugin author. This service is provided by OpenAI: * Terms of use: https://openai.com/policies/row-terms-of-use/ * Privacy policy: https://openai.com/policies/row-privacy-policy/ You must supply your own OpenAI API key to use these features. Google Analytics (optional) If you enable the Google Analytics integration and enter your own GA4 measurement ID, the plugin loads the Google Tag (gtag.js) script from Google on your site’s front end, which sends visitor analytics data to Google. This is disabled by default and only happens if you enable it and provide a measurement ID. This service is provided by Google: * Terms of service: https://policies.google.com/terms * Privacy policy: https://policies.google.com/privacy Competitor and backlink analysis (optional) The competitor analysis and backlink monitoring features fetch the URLs that you explicitly add in the plugin’s settings, in order to read their public pages. Requests are only made to addresses you enter yourself. Privacy Policy This plugin does not collect or store any personal data on our servers. All data remains on your WordPress installation. When you use AI-powered features, the plugin sends content to OpenAI’s API. Please review OpenAI’s privacy policy at https://openai.com/policies/privacy-policy. Your OpenAI API key is stored encrypted in your WordPress database using AES-256-CBC encryption. Support For support, please visit: * Documentation: https://github.com/MervinPraison/WordPressAISEO * Issues: https://github.com/MervinPraison/WordPressAISEO/issues * Website: https://mer.vin

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C