CVE-2026-15252

Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access

Medium · published July 30, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00287 · 20.2th percentile
Published
2026-07-30T06:00Z
EPSS history
Timeline
  • 30 JUL 06:00Z
    Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access
    cvelistv5