Search Atlas CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Search Atlas CVE published 2026-09-05

CVE-2026-15247

The Search Atlas SEO WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account credentials. This vulnerability affects WordPress installations with the Search Atlas SEO plugin installed, potentially [truncated]