Auth bypass in Praison Ai Seo
CVE-2026-12082
The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plu…
Vulnerability class: Broken Access Control
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Unknown Praison Ai Seo — versions 0
Weakness classification (CWE)
References
- contact@wpscan.com (technical-description, exploit, vdb-entry)
Frequently asked questions
- What is CVE-2026-12082?
- CVE-2026-12082 is a high-severity vulnerability in Praison Ai Seo, classified under Missing Authorization. CVSS score: 7.5/10. Published 2026-07-23.
- How severe is CVE-2026-12082?
- High severity. CVSS v3 base score is 7.5 out of 10.