CVE-2026-15252

The CVE 2026-15252 concerns the Search Atlas SEO WordPress plugin (pre-2.6.12). A missing capability/nonce check in an AJAX handler lets any authenticated user (e.g., Subscriber) trigger the Google Indexing API integration, submitting or removing URLs from Google's index and consuming indexing qu...

EUVD-2026-50998

The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and...