---
title: "All in One SEO"
description: "All in One SEO free or Pro: strengths, limitations, real renewal prices, recommended settings and patched vulnerabilities, to decide and configure it well."
language: "en"
locale: "en-US"
type: "plugin-sheet"
canonical: "https://www.wp-masquerade.com/features/camouflaged-plugins/all-in-one-seo/"
published: "2026-11-04T08:00:00+00:00"
modified: "2026-11-05T20:58:15+00:00"
translations:
  en-US: "https://www.wp-masquerade.com/features/camouflaged-plugins/all-in-one-seo/index.md"
  fr-FR: "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/all-in-one-seo/index.md"
  es-ES: "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/all-in-one-seo/index.md"
  de-DE: "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/all-in-one-seo/index.md"
  it-IT: "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/all-in-one-seo/index.md"
  pt-BR: "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/all-in-one-seo/index.md"
  nl-NL: "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/all-in-one-seo/index.md"
---

# All in One SEO

All in One SEO (AIOSEO), an SEO plugin published since 2007, handles metadata, sitemaps, structured data and crawl cleanup. Our take on Lite and the Pro plans, the settings to turn on, the ones to leave at their defaults and the vulnerabilities that call for fast updates.

## The essentials

- Best for small businesses new to SEO or moving away from Yoast SEO, Rank Math or SEOPress.
- Main caveat: redirects and 404 tracking start at the Pro plan, $399 per year.
- Free; Basic costs $99 per year for one site ($49.50 for the first year).

## What All in One SEO does on your site

All in One SEO (AIOSEO, formerly All in One SEO Pack) has been on wordpress.org since 2007. It controls what search engines read from your pages: the title tag, meta description, canonical URL, Open Graph tags, [XML sitemaps](https://www.wp-masquerade.com/glossary/xml-sitemap/) plus RSS and HTML sitemaps, structured data, breadcrumbs and a robots.txt editor. In the editor, the TruSEO analysis scores each post for SEO and readability, and a Headline Analyzer grades the post title.

A setup wizard walks you through the first launch, and the Import/Export tool brings over titles, descriptions and settings from Yoast SEO, Rank Math or SEOPress. A "Crawl Cleanup" section, off by default, removes secondary RSS feeds and filters abusive internal searches. The plugin can also generate an [llms.txt](https://www.wp-masquerade.com/glossary/llms-txt/) file for AI engines.

The developer, Awesome Motive (WPForms, MonsterInsights, OptinMonster), bought the plugin in 2020. The free version, called Lite, is complemented by AIOSEO Pro in four plans: Basic, Plus, Pro and Elite. Paid plans add local SEO (Plus and up), redirects, 404 tracking, the internal Link Assistant and video and news sitemaps (Pro and up), then multisite management (Elite).

![Diagram: All in One SEO works on visitors and bots, wordpress, database and files. Public traces: generator tag (removed, free version); signed HTML comments (removed, free version); JSON-LD block class (removed, free version); folder name (hidden with Pro); tag IDs (hidden with Pro).](https://www.wp-masquerade.com/media/wpm-sheets/aioseo/diagram-en.svg?v=56362244)

## Which sites All in One SEO is a good fit for

AIOSEO suits these profiles best:

- **Small businesses and bloggers new to SEO**: the setup wizard and the dashboard checklist give you a sound baseline without learning every setting.
- **Sites leaving another SEO plugin**: the importer carries over existing metadata, so you do not retype it post by post.
- **Businesses with several locations**: from the Plus plan, the Local SEO module handles multiple addresses, opening hours and local business structured data.
- **Agencies**: the Elite plan covers 100 sites and adds client management and multisite support.

It is not the best choice if you want redirects and 404 tracking without paying: [Rank Math](https://www.wp-masquerade.com/features/camouflaged-plugins/rank-math-seo/) includes both in its free version, and the [Redirection](https://www.wp-masquerade.com/features/camouflaged-plugins/redirection/) plugin can sit alongside any SEO plugin.

## All in One SEO strengths and limitations

### Strengths

- **Guided onboarding.** A setup wizard, an SEO checklist and an importer for Yoast SEO, Rank Math and SEOPress.
- **Free crawl cleanup.** Unneeded RSS feeds switched off and internal search filtered (length, emojis, known spam patterns).
- **Several sitemap types for free.** XML, RSS and HTML sitemaps, plus an optional llms.txt file.

### Limitations

- **Redirects only from the Pro plan.** Server redirects, full site redirects and 404 tracking are not in Lite, Basic or Plus.
- **Limited schema in the free version.** Lite covers posts, pages, categories and tags; Product, FAQ or Recipe graphs are paid.
- **Renewals at full price.** The discount only applies to the first year: Basic costs $99 per year ($49.50 for the first year).
- **A busy vulnerability record.** A critical privilege escalation in 2021 and two flaws exploitable without an account in October 2026.
- **One focus keyphrase in the free version.** Additional TruSEO keywords (up to 10) are reserved for paid plans.

## The settings we recommend for All in One SEO

All of these settings exist in the current free version, under the All in One SEO menu.

| Setting | Recommended value | Why |
| --- | --- | --- |
| **Enable Sitemap**  All in One SEO > Sitemaps > General Sitemap | On (default) | The `/sitemap.xml` sitemap replaces the WordPress one; submit it in Google Search Console. |
| **Show in Search Results** (Author Archives) All in One SEO > Search Appearance > Archives | Off on a single-author site | Author pages become noindex and leave the sitemap, which avoids a duplicate of the blog archive. |
| **Show in Search Results** (Date Archives) Same screen | Off, unless a news site relies on them | Monthly archives repeat content already indexed elsewhere. |
| **Crawl Cleanup**  All in One SEO > Search Appearance > Advanced | On, keeping the Global RSS Feed | Turns off secondary feeds (comments, search, Atom, RDF); their URLs redirect to the homepage or the matching archive. |
| **Internal Site Search Cleanup**, with Max. Number of Characters set to 50 and Common Spam Patterns Same screen | On | Caps the length of internal searches and blocks known spam patterns; it only works while Crawl Cleanup is on. |
| **Run Shortcodes**  Same screen, Advanced Settings | Off (default) | The developer warns it can conflict with plugins and themes; only turn it on if an SEO title needs it. |
| **Redirect Attachment URLs**  All in One SEO > Search Appearance > Image SEO | Attachment (default) | WordPress attachment pages carry little value; the URL leads straight to the file. |
| **Webmaster Tools**  All in One SEO > General Settings | Filled in if you verify Search Console with a meta tag | Adds the Google or Bing verification tag without editing the theme. |

- Open `/sitemap.xml` on your site: the sitemap index should load.
- Open `/feed/` after enabling Crawl Cleanup: the main feed should still respond.
- In Plugins, check that the installed version is at least 5.0.2.1.

## All in One SEO security: serious flaws, patch without delay

Most of AIOSEO's serious vulnerabilities come from weak permission checks on the REST API routes behind its interface:

- **CVE-2021-25036 and CVE-2021-25037, fixed in 4.1.5.3**: a mere subscriber could call protected REST routes, up to code execution (CVSS 8.8 per NVD), and an SQL injection could expose hashed passwords.
- **CVE-2025-67950, versions up to 4.9.1**: a blind SQL injection (CVSS 8.5).
- **CVE-2026-100152 and CVE-2026-19856, fixed in 5.0.2.1**: an unauthenticated visitor could run any shortcode registered on the site through the search parameter. AIOSEO breadcrumbs had to be displayed on the search results page; on sites upgraded from older versions, the protection was disabled outright (CVSS 6.5).

Update to at least 5.0.2.1 and turn on automatic updates for the plugin in Plugins (see our guide to automatic plugin updates); with AIOSEO Pro, update the Pro plugin too. Close public registration if you do not need it. The full timeline is in our article on [All in One SEO vulnerabilities](https://www.wp-masquerade.com/all-in-one-seo-security-vulnerabilities/). AIOSEO stamps your pages with an HTML comment and a generator tag that reveal its version number, and tags its structured data script with a class bearing its name: WP Masquerade removes these traces starting with its free version, which makes the plugin harder to spot for bots targeting these flaws, without replacing the update.

## All in One SEO FAQ

**Is the free version of All in One SEO enough?**

For a blog or a business site, often yes: metadata, sitemaps, basic structured data, breadcrumbs and crawl cleanup are free. A paid plan makes sense if you need local SEO, redirects or advanced schema graphs.

**How much does AIOSEO Pro cost, and for how many sites?**

The pricing page, in US dollars, lists yearly prices of $99 for Basic (1 site), $199 for Plus (3 sites), $399 for Pro (10 sites) and $599 for Elite (100 sites), the prices charged at renewal. The first year is discounted: $49.50, $99.50, $199.50 and $299.50.

**Can I switch from Yoast SEO to All in One SEO without retyping everything?**

Yes: All in One SEO > Tools > Import/Export brings over titles, descriptions and settings from [Yoast SEO](https://www.wp-masquerade.com/features/camouflaged-plugins/yoast-seo/), Rank Math or SEOPress. Take a backup first, then deactivate the old plugin once you have checked the import.

**Can All in One SEO create an llms.txt file?**

Yes, in the free version, from the LLMs.txt tab of the Sitemaps settings; the feature is off by default. The detailed llms-full.txt variant is reserved for the paid version.

## Key facts

- Category: SEO
- Vendor: Awesome Motive
- Price: Free; Pro from $99 per year for one site (Basic plan, $49.50 for the first year)
- Active installations (wordpress.org): 2 000 000+
- Version: 5.0.4
- Official page: https://wordpress.org/plugins/all-in-one-seo-pack/

## What WP Masquerade hides

- Handled by the free version of WP Masquerade
- Removed by the free version: generator tag, signed HTML comments, JSON-LD block class
- With Pro: folder name, tag IDs