CVE-2026-100152

Name of the Vulnerable Software and Affected Versions All in One SEO versions prior to 5.0.3

Description The plugin allows unauthenticated attackers to execute arbitrary shortcodes because it fails to properly validate a value before running the do shortcode() function. This issue occurs when the AIOSEO breadcrumb is rendered on the search results page through a block, widget, shortcode, or template tag.

Recommendations Update to version 5.0.3 or later.