PT-2026-86334
CVE-2026-78362
·
تاريخ النشر
2026-09-05
·
تاريخ التحديث
2026-09-07
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SEO Flow by LupsOnline WordPress plugin versions prior to 3.0.3
Description
Insufficient validation of credentials supplied with API requests allows unauthenticated users to be treated as the administrator who configured the plugin. This leads to privilege escalation, where attackers can elevate their permissions beyond intended roles and potentially take over the site. This issue occurs when the plugin is in its normal configured operating state.
Recommendations
Update SEO Flow by LupsOnline WordPress plugin to version 3.0.3 or later.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾