Xagio SEO vulnerabilities
Published CVEs affecting Xagio SEO products: 3 record(s), with severity, exploitation and fixes.
CVE-2026-78295
High · 8.8
CWE-352 Sep 17, 2026
WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery (CSRF) in Xagio SEO <= 7.1.0.43 versions.
CVE-2026-24968
Critical · 9.8
CWE-266 Mar 25, 2026
WordPress Xagio SEO plugin <= 7.1.0.30 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in Xagio SEO Xagio SEO xagio-seo allows Privilege Escalation.This issue affects Xagio SEO: from n/a through <= 7.1.0.30.
CVE-2025-63025
Medium · 4.3
CWE-862 Dec 9, 2025
WordPress Xagio SEO plugin <= 7.1.0.37 - Broken Access Control vulnerability
Missing Authorization vulnerability in Xagio SEO Xagio SEO xagio-seo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xagio SEO: from n/a through <= 7.1.0.37.