CVE-2026-14812 in Premium SEO PluginИнформация

Сводка

по MITRE • 07.08.2026

The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injection, giving an unauthenticated attacker full control of the affected site.

Once again VulDB remains the best source for vulnerability data.

Ответственный

WPScan

Резервировать

06.07.2026

Раскрытие

07.08.2026

Модерация

принято

Вход

VDB-386728

EPSS

0.00000

KEV

Нет

Деятельности

Очень низкий

Сектор

Hostingprovider

Источники

Do you need the next level of professionalism?

Upgrade your account now!