{"id":"CVE-2026-15252","aliases":["EUVD-2026-50998","GHSA-4cg6-5xq4-m2fc"],"status":"published","title":"Search Atlas SEO \u003c 2.6.12 - Subscriber+ Google Indexing API Access","description":"The Search Atlas SEO  WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.","severity":{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.00287,"percentile":0.21438,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2026-07-30T06:00:09Z","modified":"2026-07-30T15:31:48Z","products":[{"vendor":"search atlas","product":"search atlas seo"},{"vendor":"unknown","product":"search atlas seo"}],"references":[{"url":"https://wpscan.com/vulnerability/a347a7a8-36d6-4806-8781-a9ae8eb94788/","tags":["exploit","vdb-entry","technical-description"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-15252"},{"url":"https://wpscan.com/vulnerability/a347a7a8-36d6-4806-8781-a9ae8eb94788"},{"url":"https://github.com/advisories/GHSA-4cg6-5xq4-m2fc"}],"sources":{"cve":[{"id":"CVE-2026-15252","title":"Search Atlas SEO \u003c 2.6.12 - Subscriber+ Google Indexing API Access","description":"The Search Atlas SEO  WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.","status":"published","published":"2026-07-30T06:00:09.016Z","modified":"2026-07-30T14:50:24.51Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"adp"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T13:47:51.033687Z"}],"euvd":[{"id":"EUVD-2026-50998","description":"The Search Atlas SEO  WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.","status":"published","published":"2026-07-30T06:00:09Z","modified":"2026-07-30T14:50:24Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T18:02:28.93005Z"}],"ghsa":[{"id":"GHSA-4cg6-5xq4-m2fc","title":"The Search Atlas SEO  WordPress plugin before 2.6.12 does not perform a capability or nonce check...","description":"The Search Atlas SEO  WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.","status":"published","published":"2026-07-30T06:32:36Z","modified":"2026-07-30T15:31:48Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:09:56.692541Z"}],"nvd":[{"id":"CVE-2026-15252","description":"The Search Atlas SEO  WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.","status":"published","published":"2026-07-30T06:25:01.94Z","modified":"2026-07-30T15:16:26.587Z","cvss":[{"version":"3.1","score":5.4,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:12:33.955581Z"}]}}