Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2026-15252

Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Search Atlas SEO

Default version status: unaffected

  • 0 to < 2.6.12affected

References