CVE-2026-109930 MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...

WordPress MAIO plugin < 7.3.22 - Unauthenticated Crawl Analytics Disclosure vulnerability

Unauthenticated Crawl Analytics Disclosure vulnerability discovered by Ryan Fabella in WordPress Plugin MAIO The new AI GEO / SEO tool versions 7.3.22...