CVE-2026-15946

Name of the Vulnerable Software and Affected Versions Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization versions prior to 2.6.24

Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. Authenticated attackers with subscriber-level access or higher can overwrite the whitelabel settings password with a value they control. This allows unauthorized access to protected admin settings tabs, specifically the whitelabel, general, and advanced configuration sections.

Recommendations Update Search Atlas SEO – Premier SEO Plugin for One-Click WP Publishing & Integrated AI Optimization to version 2.6.24 or later.