WordPress BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility plugin <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation vulnerability

Missing Authorization to Authenticated Contributor+ Limited Privilege Escalation vulnerability discovered by Wordfence PRISM in WordPress Plugin BeyondSEO – AI SEO to Improve Rankings, Listings & Online Visibility versions = 1.3.6...

CVE-2026-76780

The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This is due to the plugin permanently granting the 'rankingcoachwriteredirectManager' and sibling rankingcoachwrite module capabilities to the Contributor role via...

CVE-2026-76780 BeyondSEO <= 1.3.6 - Missing Authorization to Authenticated (Contributor+) Limited Privilege Escalation

The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This is due to the plugin permanently granting the 'rankingcoachwriteredirectManager' and sibling rankingcoachwrite module capabilities to the Contributor role via...

EUVD-2026-111611

The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This is due to the plugin permanently granting the 'rankingcoachwriteredirectManager' and sibling rankingcoachwrite module capabilities to the Contributor role via...

CVE-2026-76780

The Beyondseo plugin for WordPress (versions up to and including 1.3.6 ) is vulnerable to limited privilege escalation due to improper authorization. The plugin grants rankingcoach_write_redirectManager capabilities to the Contributor role via BaseModule::defineCapabilities(). Because the module'...

PT-2026-127891

The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This is due to the plugin permanently granting the 'rankingcoach write redirectManager' and sibling rankingcoach write module capabilities to the Contributor role via...