CVE-2026-109930

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...

EUVD-2026-102837

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve the stored crawl-analytics log, including each recorded...

CVE-2026-109930

The MAIO WordPress plugin (versions before 7.3.22 ) contains a vulnerability where it fails to properly restrict access to its analytics data. The software treats a hardcoded credential shipped verbatim in its public source as a valid API key. This flaw allows unauthenticated attackers to retriev...