WordPress plugin · slim-seo
Is Slim SEO safe?
Safe on 4.11.4 or newer.
The current version, 4.11.4, is past every affected range on record (7 of 7 records list one). Keep it updated and you’re clear of them.
- Flaws on record
- 7
- High or critical
- 1
- Exploited
- none
- Current version
- 4.11.4
- Last updated
- Oct 20, 2026
- Active installs
- 70,000+
Every recorded flaw
- Oct 16, 2026The Slim SEO – AI SEO Plugin, Lightweight, Fast & Automated: Arbitrary shortcode executionCVE-2026-104001 · affects up to 4.11.1 · reported by WordfenceMedium 5.4
- Sep 11, 2026Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.CVE-2026-62113 · affects up to 4.10.0 · reported by PatchstackMedium 4.3
- Aug 9, 2026Slim SEO: Does not restrict a post-meta preview feature to posts the user is allowed to editCVE-2026-16957 · fixed in 4.9.11 · reported by WPScanLow 2.7
- Jul 1, 2026Slim SEO – A Fast & Automated SEO Plugin For: Unauthorized Private Content DisclosureCVE-2026-12408 · affects up to 4.9.8 · reported by WordfenceMedium 4.3
- Jun 25, 2026Contributor Broken Access Control in Slim SEO <= 4.6.2 versions.CVE-2026-57429 · affects up to 4.6.2 · reported by PatchstackMedium 6.5
- Jun 17, 2025Slim SEO: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')CVE-2025-49854 · affects up to 4.5.4 · reported by PatchstackHigh 7.6
- May 21, 2025Slim SEO – Fast & Automated WordPress SEO: Stored Cross-Site ScriptingCVE-2025-4611 · affects up to 4.5.3 · reported by WordfenceMedium 6.4
Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.