CVE-2026-78295

The Xagio SEO plugin in versions up to and including 7.1.0.43 contains an Unauthenticated Cross Site Request Forgery (CSRF) vulnerability. The lack of CSRF protection allows an attacker to force a logged-in user to perform unwanted actions.

An attacker could trick an administrator or user into performing unintended operations in the WordPress panel, potentially leading to configuration changes or other unwanted actions.

Update the Xagio SEO plugin to a version newer than 7.1.0.43 as soon as a fix is available, and consider restricting access to the administrative panel.