SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-10755

LOW · CVSS 2.7 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-20 · Last synced 2026-08-19

CyberRota Analysis

AI-Generated

The All in One SEO plugin for WordPress prior to version 4.9.9 has a vulnerability that allows users with low-level privileges, such as Contributors, to access restricted AI integration REST API endpoints. This could lead to unauthorized modifications of the site-wide AI integration state, potentially compromising the site's functionality. WordPress site administrators, particularly those using this plugin, should prioritize updating to the latest version to mitigate this risk.

CVE
CVE-2026-10755
Severity
LOW
CVSS
2.7
EPSS
0.17%
WordPress

Original NVD Description

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state.