CVE-2026-78362

Name of the Vulnerable Software and Affected Versions SEO Flow by LupsOnline WordPress plugin versions prior to 3.0.3

Description Insufficient validation of credentials supplied with API requests allows unauthenticated users to be treated as the administrator who configured the plugin. This leads to privilege escalation, where attackers can elevate their permissions beyond intended roles and potentially take over the site. This issue occurs when the plugin is in its normal configured operating state.

Recommendations Update SEO Flow by LupsOnline WordPress plugin to version 3.0.3 or later.