All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

3953 searches this plugin appeared in over the last 90 days, 20 listed. 3828 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 2 months ago and the previous band took 4.8 years to cross, so the real count is still just under 3M.

1. ★★★★★ fcbertinchamps1031

   4mo ago

   So far everything is very user friendly and everything works according to specifications. Thank you for the easy to use plug-in

   Read on wp.org ↗
2. ★★★★★ dogbase

   4mo ago

   Works Fantastic! thanks!

   Read on wp.org ↗
3. ★★★★★ jcdv33

   4mo ago

   Shivam provided excellent support for my issue. He went above and beyond in order to resolve the issue. He never gave up and continued following up with me and his development team.

   Read on wp.org ↗
4. ★★★★★ developrsk

   4mo ago

   I discovered that AIOSEO is automatically installing the Universally plugin without my authorization. After reviewing the source code, I found that installUniversally() is called when the translation feature is detected. A plugin should never install another plugin without the site owner’s explicit consent. Please make this behavior opt-in and require clear user confirmation before installing any additional software.

   Read on wp.org ↗
5. ★★★★★ kokhuei0107

   4mo ago

   AI SEO is good and got many review This topic was modified 2 days, 15 hours ago by kokhuei0107. Reason: business need

   Read on wp.org ↗
6. ★★★★★ AL SHIBA GENERAL TRADING

   4mo ago

   The customer Service is Excellent . I have shared login details for installation and setup . They did good work. Thanks to AIOSEO Team !!!!Keep good works !!!

   Read on wp.org ↗
7. ★★★★★ David Saunders

   4mo ago

   I’ve been using SEO plugins for two decades or more or less …. I was getting tired of the big names and tried quite a few newer plugins. Then I stumbled on AIOSEO and liked it. Then liked it more and now LOVE IT. I’m not leaving you and I will recommend them to you and my SEO clients. Thank you AIOSEO David aka David Can’t Swim

   Read on wp.org ↗
8. ★★★★★ eaanton

   4mo ago

   I had a conflict that I couldn’t find in my plugins. AIOSEO support did everything they could to resolve the issues. They responded quickly, and they were professional and effective.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.9.10 New: Added a new ability to list terms that are missing SEO data. Fixed: PHP 8.5 deprecation notice when decoding HTML entities from empty content. Fixed: High CPU usage caused by the translations check on sites with lar 4.9.10
2. — Version 4.9.9 New: SEO Alerts feature to notify site owners of critical SEO issues via email and Slack. New: New #event_start_date and #event_end_date smart tags for events when The Events Calendar plugin is active. Updated: Sitemap h 4.9.9
3. — Version 5.0.0.1 Updated: Made Search Appearance and Social Appearance cards in metabox collapsible. Fixed: Focus keyword and additional keywords sometimes not appearing in TruSEO after 5.0.0 update. Fixed: Resurfaced missing product ID, 5.0.0.1
4. — Version 5.0.0 New: TruSEO just got a major revamp — it’s smarter, faster, supports 10+ new languages and has a new modern UI. New: TruSEO Highlighter revamp — an improved editor highlighter that flags issues TruSEO found, working seam 5.0.0
5. — Version 5.0.1 New: TruSEO content analysis for taxonomy terms, starting with WooCommerce product categories. Fixed: SEO Analysis now shows a clear “Preview unavailable” message when a firewall blocks the homepage or competitor screens 5.0.1
6. — Version 5.0.1.1 Fixed: The link toolbar’s nofollow, sponsored and UGC options were missing from the editor, and the Classic Editor’s Insert/Edit Link dialog did not open. Fixed: The link toolbar could crash the block editor on WordPress 5.0.1.1

All 33 disclosed vulnerabilities are patched in the current version (5.0.4). Sites still on an older version should update.

1. Patched Medium · 5.3 All in One SEO <= 5.0.3 - Unauthenticated Sensitive Information Disclosure in 's' Search Query Parameter ↗
   2026-10-30 CVE-2026-109367 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 5.0.3 Patched in 5.0.4
2. Patched Medium · 6.5 All in One SEO <= 5.0.2 - Unauthenticated Arbitrary Shortcode Execution via 's' Search Query Parameter ↗
   2026-10-02 CVE-2026-100152 Improper Control of Generation of Code Affects <= 5.0.2 Patched in 5.0.2.1
3. Patched Medium · 6.5 All in One SEO <= 5.0.2.0 - Unauthenticated Arbitrary Shortcode Execution ↗
   2026-10-02 CVE-2026-19856 Improper Control of Generation of Code Affects <= 5.0.2.0 Patched in 5.0.2.1
4. Patched Medium · 6.1 All in One SEO <= 5.0.1.1 - Reflected DOM-Based Cross-Site Scripting via URL Pathname ↗
   2026-10-01 CVE-2026-85492 Improper Neutralization of Input During Web Page Generation Affects <= 5.0.1.1 Patched in 5.0.2
5. Patched Medium · 6.4 All in One SEO <= 5.0.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
   2026-09-01 CVE-2026-82884 Improper Neutralization of Input During Web Page Generation Affects <= 5.0.0.0 Patched in 5.0.0.1
6. Patched Medium · 5.3 All in One SEO < 4.9.9 - Missing Authorization ↗
   2026-06-29 CVE-2026-10755 Missing Authorization Affects < 4.9.9 Patched in 4.9.9
7. Patched Medium · 4.3 All in One SEO <= 4.9.7 - Authenticated (Contributor+) Sensitive Information Exposure via 'internalOptions' Localized Script Data ↗
   2026-05-19 CVE-2026-5075 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.9.7 Patched in 4.9.7.1
8. Patched Medium · 4.3 All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.9.2 - Missing Authorization to Authenticated (Contributor+) AI Access Token and Credit Disclosure ↗
   2026-01-15 CVE-2025-14384 Missing Authorization Affects <= 4.9.2 Patched in 4.9.3
9. Patched Medium · 6.5 All In One SEO Pack <= 4.9.1 - Authenticated (Contributor+) SQL Injection ↗
   2025-12-06 CVE-2025-67950 Improper Neutralization of Special Elements used in an SQL Command Affects <= 4.9.1 Patched in 4.9.1.1
10. Patched Medium · 4.3 All In One SEO Pack <= 4.8.6.1 - Authenticated (Subscriber+) Information Exposure ↗
    2025-11-26 CVE-2025-64295 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.8.6.1 Patched in 4.8.7
11. Patched Medium · 4.3 All in One SEO – Powerful SEO Plugin to Boost SEO Rankings & Increase Traffic <= 4.8.9 - Missing Authorization to Authenticated (Contributor+) Arbitrary Media Deletion ↗
    2025-11-14 CVE-2025-12847 Missing Authorization Affects <= 4.8.9 Patched in 4.9.0
12. Patched Medium · 5.4 All In One SEO Pack <= 4.8.7.1 - Missing Authorization ↗
    2025-09-22 CVE-2025-58650 Missing Authorization Affects <= 4.8.7.1 Patched in 4.8.7.2
13. Patched Medium · 4.3 All In One SEO Pack <= 4.8.7.1 - Authenticated (Contributor+) Sensitive Information Exposure ↗
    2025-09-22 CVE-2025-58649 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 4.8.7.1 Patched in 4.8.7.2
14. Patched Medium · 6.4 All in One SEO Pack <= 4.8.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta Description and Canonical URL ↗
    2025-05-18 CVE-2025-2892 Improper Neutralization of Input During Web Page Generation Affects <= 4.8.1.1 Patched in 4.8.2
15. Patched Medium · 6.4 All in One SEO <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2024-04-29 CVE-2024-3368 Improper Neutralization of Input During Web Page Generation Affects <= 4.6.0 Patched in 4.6.1.1
16. Patched Medium · 6.4 All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
    2024-04-29 CVE-2024-3554 Improper Neutralization of Input During Web Page Generation Affects <= 4.6.0 Patched in 4.6.1.1
17. Patched Medium · 6.4 All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2023-02-24 CVE-2023-0586 Improper Neutralization of Input During Web Page Generation Affects <= 4.2.9 Patched in 4.3.0
18. Patched Medium · 4.4 All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting ↗
    2023-02-24 CVE-2023-0585 Improper Neutralization of Input During Web Page Generation Affects <= 4.2.9 Patched in 4.3.0
19. Patched High · 8.8 All in One SEO <= 4.2.3.1 - Cross-Site Request Forgery ↗
    2022-09-05 CVE-2022-38093 Cross-Site Request Forgery Affects <= 4.2.3.1 Patched in 4.2.4
20. Patched High · 8.8 All in One SEO 4.0.0 - 4.1.5.2 Authorization Bypass ↗
    2021-12-14 CVE-2021-25036 Improper Authentication Affects 4.0.0 - 4.1.5.2 Patched in 4.1.5.3
21. Patched Critical · 9.6 All in One SEO 4.1.3.1 - 4.1.5.2 - Authenticated SQL Injection ↗
    2021-12-14 CVE-2021-25037 Improper Neutralization of Special Elements used in an SQL Command Affects 4.1.3.1 - 4.1.5.2 Patched in 4.1.5.3
22. Patched High · 8.8 All in One SEO <= 4.1.0.1 - Authenticated Code Injection ↗
    2021-05-09 CVE-2021-24307 Improper Control of Generation of Code Affects < 4.1.0.2 Patched in 4.1.0.2
23. Patched Medium · 6.4 All in One SEO Pack <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting ↗
    2020-07-16 CVE-2020-35946 Improper Neutralization of Input During Web Page Generation Affects < 3.6.2 Patched in 3.6.2
24. Patched Medium · 6.4 All In One SEO Pack <= 3.2.6 - Stored Cross-Site Scripting ↗
    2019-10-16 CVE-2019-16520 Improper Neutralization of Input During Web Page Generation Affects <= 3.2.6 Patched in 3.2.7
25. Patched Medium · 6.4 All in One SEO <= 2.9.1.1 - Authenticated Stored Cross-Site Scripting ↗
    2018-10-18 Improper Neutralization of Input During Web Page Generation Affects < 2.10 Patched in 2.10
26. Patched High · 7.2 All in One SEO Pack <= 2.3.7 - Unauthenticated Stored Cross-Site Scripting ↗
    2016-07-13 Improper Neutralization of Input During Web Page Generation Affects < 2.3.8 Patched in 2.3.8
27. Patched High · 7.2 All in One SEO – Best WordPress SEO Plugin – Easily Improve SEO Rankings & Increase Traffic <= 2.3.6 - Stored Cross-Site Scripting ↗
    2016-07-01 Improper Neutralization of Input During Web Page Generation Affects < 2.3.7 Patched in 2.3.7
28. Patched Medium · 6.1 All in One SEO <= 2.2.6.1 - Reflected Cross-Site Scripting ↗
    2015-04-20 Improper Neutralization of Input During Web Page Generation Affects < 2.2.6.2 Patched in 2.2.6.2
29. Patched Medium · 5.3 All in One SEO <= 2.2.5.1 - Information Disclosure ↗
    2015-03-31 CVE-2015-0902 Exposure of Sensitive Information to an Unauthorized Actor Affects < 2.2.6 Patched in 2.2.6
30. Patched Medium · 6.1 All in One SEO <= 2.0.3 - Cross-Site Scripting via Search Parameter ↗
    2014-08-01 CVE-2013-5988 Improper Neutralization of Input During Web Page Generation Affects <= 2.0.3 Patched in 2.0.3.1
31. Patched Medium · 6.3 All in One SEO <= 2.1.5 - Missing Authorization ↗
    2014-05-31 Missing Authorization Affects <= 2.1.5 Patched in 2.1.6
32. Patched Medium · 6.4 All in One SEO <= 2.1.5 - Cross-Site Scripting ↗
    2014-05-31 Improper Neutralization of Input During Web Page Generation Affects <= 2.1.5 Patched in 2.1.6
33. Patched Medium · 4.3 All in One SEO <= 2.2.4.1 - Privilege Escalation to Arbitrary Post Modification ↗
    2014-05-31 Affects <= 2.2.4.1 Patched in 2.2.5

Translated into 89 languages, 10 at 90% or more

Plus 65 more locales with partial translations.

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-08-25 3M+ → 2M+ down after 1758 days in tier
2. 2021-11-01 2M+ → 3M+ up after 1126 days in tier
3. 2018-10-02 3M+ → 2M+ down after 580 days in tier
4. 2017-03-01 1M+ → 3M+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights) into a readme, a review or a deck. It updates itself.

All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights): 2M+ active installs, 4.7★ (5,231 reviews). Plugin Pulse (WP Mayor), as of 2026-11-03. https://plugins.wpmayor.com/plugin/all-in-one-seo-pack