PT-2025-41847 · WordPress · Simple Seo

Krugov Artyom · CVE-2025-10357 · Published 2025-10-14 · Updated 2025-10-14

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple SEO WordPress plugin versions prior to 2.0.32

Description The software does not properly sanitize and escape parameters when outputting them on the page. This could allow users with a contributor role or higher to perform Cross-Site Scripting attacks.

Recommendations Update to version 2.0.32 or later.

Exploit

Fix

Related Identifiers

CVE-2025-10357

Affected Products

Simple Seo

References · 7

• 🔥 https://wpscan.com/vulnerability/24fcf8ef-603f-4e1f-905d-fbaf989a617f · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10357 · Security Note
• https://twitter.com/CVEnew/status/1977983507654746531 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1977997747429978182 · Twitter Post
• https://t.me/cveNotify/138561 · Telegram Post
• https://t.me/CVEtracker/34826 · Telegram Post
• https://t.me/cveNotify/138490 · Telegram Post