CVE-2026-16257

8.2 Élevée

Publiée le 10/08/2026 à 09:16 · Modifiée le 26/08/2026 à 18:31 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowing them to create arbitrary posts and pages and to disclose author account and taxonomy information.

Traduire en français

Produits concernés

Unknown Arvow AI SEO Writer

Scores CVSS

Version	Score	Source	Vecteur
3.1	8.2 Élevée	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N`

Faiblesses (CWE)

CWE-287

Références

https://wpscan.com/vulnerability/89c32854-1cf1-4fe9-a6d0-6244be2dcc03/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories