low2.7
CVE-2026-10755
The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-l…
Impact
The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state.
Affected products
| Product | Affected versions |
|---|---|
| One SEO WordPress Plugin | before 4.9.9 |
Versions were read from the advisory text. No structured product data has been published for this record yet.