CVE-2026-16257

Name of the Vulnerable Software and Affected Versions Arvow AI SEO Writer WordPress plugin versions prior to 1.5.4

Description Insufficient access control in a REST endpoint allows unauthenticated users to bypass security checks via type juggling when the plugin is not configured. Type juggling is a behavior in some programming languages where a variable is automatically converted to a different data type, which can be exploited to bypass comparison checks. This flaw enables attackers to create arbitrary posts and pages, as well as disclose taxonomy information and author account details.

Recommendations Update Arvow AI SEO Writer WordPress plugin to version 1.5.4 or later.