Ai For Seo
Monthly
Broken access control in the AI for SEO WordPress plugin (versions ≤ 2.4.2) permits unauthenticated remote attackers to invoke restricted plugin functionality without credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication, no user interaction, and no special network position - any internet-facing WordPress site running the affected plugin is reachable. Impact is bounded to partial integrity and availability disruption (I:L/A:L) with no confidentiality exposure, suggesting unauthorized manipulation of plugin operations rather than data exfiltration. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.
Broken access control in the AI for SEO WordPress plugin (versions ≤ 2.4.2) permits unauthenticated remote attackers to invoke restricted plugin functionality without credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms exploitation requires no authentication, no user interaction, and no special network position - any internet-facing WordPress site running the affected plugin is reachable. Impact is bounded to partial integrity and availability disruption (I:L/A:L) with no confidentiality exposure, suggesting unauthorized manipulation of plugin operations rather than data exfiltration. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV.