CVE-2026-14812 | BDVDB-2026-355759 Detail

Description#

The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injection, giving an unauthenticated attacker full control of the affected site.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-08-06Record published in the CVE List.
2. Version 22026-08-07Most recent update recorded in the CVE List.