CVE-2026-14812

Name of the Vulnerable Software and Affected Versions Premium SEO WordPress plugin (affected versions not specified)

Description The Premium SEO WordPress plugin is malicious and contains an unauthenticated backdoor. This backdoor allows an unauthenticated attacker to create a hidden administrator account, granting full control over the affected site. In certain builds, the plugin also enables remote code execution (the ability to run arbitrary commands on the server), server-side request forgery (forcing the server to make requests to internal or external resources), and arbitrary front-end script or content injection.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.