CVE-2026-15946

01/תיאור (מקור, אנגלית)

The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the whitelabel settings password to an attacker-controlled value, enabling them to unlock whitelabel-protected admin settings tabs including whitelabel, general, and advanced configuration.

02/קישורים8

• plugins.trac.wordpress.org/browser/metasync/tags/2.6.16/admin/‮…
• plugins.trac.wordpress.org/browser/metasync/tags/2.6.16/includ‮…
• plugins.trac.wordpress.org/browser/metasync/tags/2.6.16/includ‮…
• plugins.trac.wordpress.org/browser/metasync/tags/2.6.17/admin/‮…
• plugins.trac.wordpress.org/browser/metasync/tags/2.6.17/includ‮…
• plugins.trac.wordpress.org/browser/metasync/tags/2.6.17/includ‮…
• plugins.trac.wordpress.org/changeset/3676919
• www.wordfence.com/threat-intel/vulnerabilities/id/56d839b0-b29‮…