CVE-2026-52714— WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerability
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SEO Squirrly | SEO Plugin by Squirrly SEO | n/a≤ 12.4.16 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-52714
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.16 - Broken Access Control vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unauthenticated Broken Access Control in SEO Plugin by Squirrly SEO <= 12.4.16 versions.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
授权机制缺失
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SEO Squirrly | SEO Plugin by Squirrly SEO | n/a ~ 12.4.16 | - |
II. Public POCs for CVE-2026-52714
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-52714
请登录查看更多情报信息。
News Coverage for CVE-2026-52714 (1)
IV. Related Vulnerabilities
Same product: SEO Plugin by Squirrly SEO
- CVE-2026-7624
SEO Plugin by Squirrly SEO <= 12.4.16 - Missing Authorizatio - CVE-2025-14342
SEO Plugin by Squirrly SEO <= 12.4.14 - Missing Authorizatio - CVE-2025-22783
WordPress SEO Plugin by Squirrly SEO plugin <= 12.4.03 - SQL - CVE-2025-1768
SEO Plugin by Squirrly SEO <= 12.4.05 - Authenticated (Subsc - CVE-2025-24654
WordPress Squirrly SEO plugin <= 12.4.07 - Broken Access Con
Same weakness: CWE-862
- CVE-2026-49057
WordPress JobSearch plugin <= 3.2.7 - Broken Access Control - CVE-2026-39433
WordPress WPAMS plugin < 49.5.3 - Arbitrary Content Deletion - CVE-2025-69137
WordPress Genemy theme <= 1.6.6 - Broken Access Control vuln - CVE-2025-69103
WordPress Brikk theme <= 3.0.0 - Arbitrary Content Deletion - CVE-2026-12105
Devolutions Server 2026.2.5权限控制不当漏洞
V. Comments for CVE-2026-52714
No comments yet