CVE-2026-16257

The Arvow AI SEO Writer WordPress plugin (before 1.5.4) has an access-control flaw in one REST endpoint. The only access control can be bypassed by unauthenticated users through type juggling when the plugin is not configured, enabling arbitrary posts/pages creation and disclosure of author accou...