Skip to content
Sign in
5.4 Medium

CVE-2026-15247 The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a…

Description

The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account credentials.

Affected products and versions

Product Affected versions Fixed in
Search Atlas SEO 2.6 earliest → < 2.6.24 2.6.24

Other CVEs of Search Atlas SEO

The 2 CVEs of Search Atlas SEO →
CVE-2026-15252 The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX… 5.4 Medium
Track this CVE