CVE-2026-54868: WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

Q: Which deployments are affected?

FolioVision FV Simpler SEO installations are affected through version 1.9.7. The affected plugin component is identified as fv-all-in-one-seo-pack.

Q: What does an attacker need to exploit this issue?

The severity vector indicates network-reachable exploitation with low privileges required and user interaction required. The issue is a stored XSS vulnerability.

Q: How can I determine whether my site is affected?

Check whether FolioVision FV Simpler SEO is installed and identify its version. Versions through 1.9.7 are within the stated affected range.

Published Oct 13, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Stored XSS.This issue affects FV Simpler SEO: from n/a through 1.9.7.

Affected Software

1 affected component

FolioVision FV Simpler SEO<=1.9.7

Event History

Oct 13, 2026

CVE Published

via MITRE·05:50 AM

Data Sourced

via MITRE·05:50 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which deployments are affected?

FolioVision FV Simpler SEO installations are affected through version 1.9.7. The affected plugin component is identified as fv-all-in-one-seo-pack.

What does an attacker need to exploit this issue?

The severity vector indicates network-reachable exploitation with low privileges required and user interaction required. The issue is a stored XSS vulnerability.

How can I determine whether my site is affected?

Check whether FolioVision FV Simpler SEO is installed and identify its version. Versions through 1.9.7 are within the stated affected range.

CVE-2026-54868: WordPress FV Simpler SEO plugin <= 1.9.7 - Cross Site Scripting (XSS) vulnerability

Affected Software

Event History

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

How can I determine whether my site is affected?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are affected?

What does an attacker need to exploit this issue?

How can I determine whether my site is affected?