SEOPress – On-site SEO & Analytics Security & Risk Analysis

The SEOPress plugin version 9.6 presents a mixed security posture. While it demonstrates good practices in many areas, such as a high percentage of SQL queries using prepared statements and properly escaped output, several concerning aspects warrant attention. The presence of unprotected AJAX handlers and REST API routes indicates potential entry points for unauthorized access or actions if not properly secured at the application level. The single critical signal of 'unserialize' is a significant concern, as deserialization vulnerabilities can lead to remote code execution if untrusted data is processed. The taint analysis did not reveal critical or high severity unsanitized paths, which is a positive sign, but the presence of unsanitized paths at all warrants careful review. The plugin's vulnerability history, with 14 known CVEs including one critical, suggests a pattern of past security weaknesses. The common vulnerability types like missing authorization, open redirects, XSS, and deserialization point to recurring issues in input validation and authorization checks, even though there are currently no unpatched CVEs. Overall, while SEOPress has strengths in its code sanitization and prepared statement usage, the unprotected entry points, the critical 'unserialize' function, and its history of vulnerabilities necessitate a cautious approach and diligent patching.