CVE-2021-34641

The SEOPress WordPress plugin is vulnerable to Stored Cross-Site-Scripting via the processPut function found in the ~/src/Actions/Api/TitleDescriptionMeta.php file which allows authenticated attackers to inject arbitrary web scripts, in versions 5.0.0 - 5.0.3.

• CWE-79
• CWE-79

• https://plugins.trac.wordpress.org/browser/wp-seopress/tags/5.0.4/src/Actions/Api/TitleDescriptionMeta.php#L78Exploit, Third Party Advisory
• https://www.wordfence.com/blog/2021/08/xss-vulnerability-patched-in-seopress-affects-100000-sites/Exploit, Third Party Advisory
• https://plugins.trac.wordpress.org/browser/wp-seopress/tags/5.0.4/src/Actions/Api/TitleDescriptionMeta.php#L78Exploit, Third Party Advisory
• https://www.wordfence.com/blog/2021/08/xss-vulnerability-patched-in-seopress-affects-100000-sites/Exploit, Third Party Advisory

Published

Aug 16, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-34636The Countdown and CountUp, WooCommerce Sales Timers WordPres…8.8
• CVE-2021-34637The Post Index WordPress plugin is vulnerable to Cross-Site …8.8
• CVE-2021-34638Authenticated Directory Traversal in WordPress Download Mana…6.5
• CVE-2021-34639Authenticated File Upload in WordPress Download Manager <= 3…8.8
• CVE-2021-3464A DLL search path vulnerability was reported in Lenovo PCMan…7.8
• CVE-2021-34640The Securimage-WP-Fixed WordPress plugin is vulnerable to Re…6.1
• CVE-2021-34642The Smart Email Alerts WordPress plugin is vulnerable to Ref…6.1
• CVE-2021-34643The Skaut bazar WordPress plugin is vulnerable to Reflected …6.1
• CVE-2021-34644The Multiplayer Games WordPress plugin is vulnerable to Refl…6.1
• CVE-2021-34645The Shopping Cart & eCommerce Store WordPress plugin is vuln…8.8
• CVE-2021-34646Versions up to, and including, 5.4.3, of the Booster for Woo…9.8
• CVE-2021-34647The Ninja Forms WordPress plugin is vulnerable to sensitive …6.5