Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2026-09-21
Search Atlas SEO - Security Vulnerability (CVE-2026-15946)
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.23. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with subscriber-level access and above, to overwrite the whitelabel settings password to an attacker-controlled value, enabling them to unlock whitelabel-protected admin settings tabs including whitelabel, general, and advanced configuration.
PLUGIN
Search Atlas SEO
CVE-2026-15946
Risk Score
Threat Entry
Updated 2026-09-08
Search Atlas SEO - Cross-Site Request Forgery (CSRF) (CVE-2026-15247)
The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account credentials.
PLUGIN
Search Atlas SEO
CVE-2026-15247
Risk Score
Threat Entry
Updated 2026-07-30
Search Atlas SEO - Cross-Site Request Forgery (CSRF) (CVE-2026-15252)
The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.
PLUGIN
Search Atlas SEO
CVE-2026-15252
Risk Score
Threat Entry
Updated 2026-07-02
Search Atlas SEO - Cross-Site Scripting (XSS) (CVE-2026-57357)
Unauthenticated Cross Site Scripting (XSS) in Search Atlas SEO
PLUGIN
Search Atlas SEO
CVE-2026-57357
Risk Score
Threat Entry
Updated 2026-06-17
Search Atlas SEO - Authentication Bypass (CVE-2025-14386)
The Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization plugin for WordPress is vulnerable to authentication bypass due to a missing capability check on the 'generate_sso_url' and 'validate_sso_token' functions in versions 2.4.4 to 2.5.12. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract the 'nonce_token' authentication value to log in to the first Administrator's account.
PLUGIN
Search Atlas SEO
CVE-2025-14386
Risk Score