CVE-2026-57761

The SEOWP plugin version 3.12.2 and earlier contains an unauthenticated Cross-Site Request Forgery (CSRF) vulnerability. An attacker can trick an administrator into performing unintended actions without their knowledge.

The risk involves the possibility of executing unauthorized operations in the context of an administrator session, which could lead to modification of plugin settings or injection of malicious code.

It is recommended to immediately update the SEOWP plugin to the latest available version that fixes this vulnerability. Also consider implementing CSRF protection mechanisms such as anti-CSRF tokens.