Threats tagged 'ghsa-jwgh-953r-2r77'

The All in One SEO – AI SEO Plugin for WordPress up to version 5.0.3 is vulnerable to sensitive information exposure via the 's' parameter. This vulnerability allows unauthenticated attackers to retrieve arbitrary non-public post meta values, including sensitive custom fields such as API keys and internal notes. These values are exposed verbatim in the HTML title element and JSON-LD SearchResultsPage schema, potentially leaking confidential information.