CVE-2026-15660

The SEO Booster WordPress plugin (versions up to 7.4.7 ) is affected by a Missing Authorization vulnerability in the handle_oauth_callback() function, which is hooked to admin_init . The function processes $_GET['access_token'] and $_GET['google_email'] without verifying the caller's role. This a...

EUVD-2026-83468

The SEO Booster plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.4.7. This is due to a missing capability check on the handleoauthcallback function which is hooked to admininit and processes $GET'accesstoken' and $GET'googleemail' without verifying t...

WordPress SEO Booster plugin <= 7.4.7 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Modification via handle_oauth_callback() vulnerability

Authenticated Subscriber+ Missing Authorization to Arbitrary Options Modification via handleoauthcallback vulnerability discovered by Wordfence PRISM - Wordfence in WordPress Plugin SEO Booster versions = 7.4.7...