CVE-2026-10755

The All in One SEO WordPress plugin, in versions prior to 4.9.9 , contains an incorrect authorization vulnerability. The plugin fails to properly restrict access to specific AI integration REST API endpoints , which allows users with low-level privileges, such as Contributors , to overwrite or re...