CVE-2026-10753

The CVE-2026-10753 entry concerns the Site Kit by Google WordPress plugin (pre-1.176.0). Root cause: a REST API write endpoint did not properly restrict access, allowing lower-privileged users with dashboard sharing (e.g., Editors) to modify a site-wide Site Kit setting that should be admin-only....