Search Atlas SEO vulnerabilities
3 known CVE vulnerabilities in Search Atlas SEO, translated and rated.
- CVE-2026-15247Unknown
The Search Atlas SEO WordPress plugin before version 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers. This allows any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account credentials.
- CVE-2026-57357High
The Search Atlas SEO plugin version 2.6.6 and earlier contains an unauthenticated Cross Site Scripting (XSS) vulnerability. An attacker can inject malicious script without requiring authentication.
- CVE-2026-15252Medium
The Search Atlas SEO WordPress plugin before 2.6.12 lacks capability and nonce checks in an AJAX handler, allowing any authenticated user (e.g., Subscriber) to invoke the Google Indexing API, submit or remove site URLs from Google's index, and consume the indexing quota.