What is GHSA-8hj6-5c8v-39ff?

GHSA-8hj6-5c8v-39ff is a security advisory published by GitHub Security Advisories with Low severity. The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of...

Which CVE IDs does GHSA-8hj6-5c8v-39ff cover?

GHSA-8hj6-5c8v-39ff covers the following CVE IDs: CVE-2026-10755. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8hj6-5c8v-39ff?

GHSA-8hj6-5c8v-39ff has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-8hj6-5c8v-39ffLowCVSS 2.7

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of...

Vendor

GitHub Security Advisories

Published

July 20, 2026

Last Modified

July 20, 2026

🔗 CVE IDs covered (1)

CVE-2026-10755 →

📋 Description

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-10755
https://wpscan.com/vulnerability/cc4e83e3-b581-4f65-ac2c-24fbfb9da4b3
https://github.com/advisories/GHSA-8hj6-5c8v-39ff