CRITICAL 10.0 NVD

CVE-2026-14812

The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enable

The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injection, giving an unauthenticated attacker full control of the affected site.

References

https://wpscan.com/vulnerability/0115a640-7139-4ef9-81be-6ee5c755a601/

Published: 2026-08-06 · Source: NVD · Feed updated: 2026-08-07

This critical severity vulnerability with a CVSS score of 10.0 was published on 2026-08-06 via NVD.

Risk Timeline

CVE Disclosed2026-08-06 · 0 days ago

Remediation Resources

Official Advisory

wpscan.com/vulnerability/0115a640-7139-4ef9-81be-6ee5c755a601/

vulnfeed aggregates 9207 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.