WordPress plugin
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium7
- Low0
All Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.4 | Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta ≤4.11.1Update to 4.11.2 | CVE-2026-104001 | |
| Medium4.3 | Authenticated (Contributor+) Insecure Direct Object Reference ≤4.10.0Update to 4.10.1 | CVE-2026-62113 | |
| Medium4.3 | Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Meta Disclosure ≤4.9.10Update to 4.9.11 | CVE-2026-16957 | |
| Medium4.3 | Authenticated (Contributor+) Insufficient Authorization to Private Content Disclosure via 'object.ID' Parameter ≤4.9.8Update to 4.9.9 | CVE-2026-12408 | |
| Medium4.3 | Missing Authorization ≤4.6.2Update to 4.7.0 | CVE-2026-57429 | |
| Medium4.9 | Authenticated (Administrator+) SQL Injection ≤4.5.4Update to 4.5.5 | CVE-2025-49854 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode ≤4.5.3Update to 4.5.4 | CVE-2025-4611 |
- Medium5.4Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta
≤4.11.1Update to 4.11.2
- Medium4.3Authenticated (Contributor+) Insecure Direct Object Reference
≤4.10.0Update to 4.10.1
- Medium4.3Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary Post Meta Disclosure
≤4.9.10Update to 4.9.11
- Medium4.3Authenticated (Contributor+) Insufficient Authorization to Private Content Disclosure via 'object.ID' Parameter
≤4.9.8Update to 4.9.9
- Medium4.3Missing Authorization
≤4.6.2Update to 4.7.0
- Medium4.9Authenticated (Administrator+) SQL Injection
≤4.5.4Update to 4.5.5
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via slim_seo_breadcrumbs Shortcode
≤4.5.3Update to 4.5.4
Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated: common questions
Does Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated: 7 medium. None are known to affect version null.
How do I check which version of Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated vulnerability?
CVE-2026-104001, published Oct 15, 2026: Slim SEO <= 4.11.1 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'Biographical Info' User Meta. Severity: Medium (CVSS 5.4).
Is any Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated vulnerability listed in CISA KEV?
No. None of the known Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated vulnerabilities is currently listed in the CISA KEV catalog.