Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:search_atlas_seo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSearch Atlas Seo (bc24cea3-8388-57f4-91e9-627b482feac8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-15247 vulnerable 2026-09-16 04:33:06.825923 Search Atlas SEO < 2.6.24 - Subscriber+ Google Service Account Credential Overwrite/Deletion
The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account credentials.
Published: 2026-09-05T06:00:04.042Z
Updated: 2026-09-06T10:45:55.145Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-15252 vulnerable 2026-09-16 04:33:06.679444 Search Atlas SEO < 2.6.12 - Subscriber+ Google Indexing API Access
The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.
Published: 2026-07-30T06:00:09.016Z
Updated: 2026-07-30T14:50:24.510Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.