Kcseopro vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Kcseopro products: 2 record(s), with severity, exploitation and fixes.

AdWords Conversion Tracking Code 1 WP SEO Structured Data Schema 1

Exploited only (KEV) →

CVE-2026-3604 Medium · 4.9 CWE-79 May 12, 2026

WP SEO Structured Data Schema <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via '_kcseo_ative_tab' Parameter

The WP SEO Structured Data Schema plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `_kcseo_ative_tab` parameter in all versions up to, and including, 2.8.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CVE-2025-62118 Medium · 6.5 CWE-79 Dec 31, 2025

WordPress AdWords Conversion Tracking Code plugin <= 1.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kcseopro AdWords Conversion Tracking Code adwords-conversion-tracking-code allows Stored XSS.This issue affects AdWords Conversion Tracking Code: from n/a through <= 1.0.