W3P SEO – Lightweight SEO, Schema & AI Search Toolkit

W3P SEO – Lightweight SEO, Schema & AI Search Toolkit has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for W3P SEO – Lightweight SEO, Schema & AI Search Toolkit has a vendor fix available, so running the current release closes it.

All of these findings were reported by SOPROBRO. W3P SEO – Lightweight SEO, Schema & AI Search Toolkit is installed on roughly 90 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.4.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all W3P SEO – Lightweight SEO, Schema & AI Search Toolkit vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2024-51684

W3P SEO <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-11-01 00:00	W3P SEO <= 1.8.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting W3P SEO <= 1.8.5	`CVE-2024-51684`	6.1 Medium	SOPROBRO	Yes

Showing 1–1 of 1 reports

Latestv2.2.1

W3P SEO – Lightweight SEO, Schema & AI Search Toolkit

Author

Ciprian Popescu

4.0(1)

80/100

Last Updated

2026-10-27 (1d ago)

Active Installs

90+

Downloads

19,758

Requires WP

5.7+

Requires PHP

7.4+

Tested up to

WP 7.1.4

Created

2011-05-13 (16y ago)

W3P SEO covers the SEO basics without dashboards full of upsells: custom titles and meta descriptions, Open Graph, local business and breadcrumb schema, native XML sitemaps, ownership verification and header/footer code. AI search llms.txt – publish a plain-text summary of your site for AI tools at /llms.txt. AI crawler controls – block GPTBot, ClaudeBot, PerplexityBot, Google-Extended and others in robots.txt with a checkbox each. Regular search engines are not affected. FAQ schema – questions in core Details and Accordion blocks become FAQPage structured data. AI-overview readiness – a short checklist in the editor: direct opening paragraph, H2 sections, lists or tables, FAQ and description length. Search result preview while you type the SEO title and description. Auto-generated descriptions now remove leftover shortcodes from deactivated plugins, so text like [pricing_table id="3"] never shows up in search results. For support, feature requests and bug reporting, please use the support forum. Pair it with Active Analytics for privacy-friendly stats and WP Google Consent Platform (GCP) for consent mode. Explore more WordPress Plugins. From the same author Active Contacts – WordPress CRM & Follow-up Plugin LazyClone – Copy a WordPress Site Without FTP Lighthouse – WordPress Performance & Speed Optimization Plugin Active Analytics – Privacy-Friendly WordPress Analytics Plugin ImagePress – WordPress Image Gallery & Community Photo Plugin eCards – WordPress eCard Plugin with Email Designer Repeater for Gravity Forms – Repeater Field Add-on Fixtures & Results – WordPress Sports League & GAA Club Plugin WP Google Consent Platform (GCP)

View on WordPress.org