CVE-2026-39697

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

The MAIO – The new AI GEO / SEO tool plugin for WordPress up to version 6.2.8 has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.

Risk Assessment

The organization risks unauthorized access to GEO/SEO functions, potentially leading to data manipulation and information leakage.

Recommendation

Update the MAIO plugin to the latest version. Restrict access to GEO/SEO tools to authorized users only.

Original NVD description (English source)

Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAIO – The new AI GEO / SEO tool: from n/a through <= 6.2.8.