30 matches found
CVE-2026-62139
Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...
CVE-2026-62139
Site Kit by Google (WordPress plugin, versions
CVE-2026-62139 WordPress Site Kit by Google plugin <= 1.186.0 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...
EUVD-2026-76198
Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...
CVE-2026-62139 WordPress Site Kit by Google plugin <= 1.186.0 - Cross Site Request Forgery (CSRF) vulnerability
Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...
CVE-2026-62139: Cross-Site Request Forgery (CSRF)
Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...
PT-2026-90037
Unauthenticated Cross Site Request Forgery CSRF in Site Kit by Google = 1.186.0 versions...
WordPress Site Kit by Google plugin <= 1.186.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross Site Request Forgery CSRF vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin Site Kit by Google versions = 1.186.0...
WordPress Plugin Site Kit by Google - Full Path Disclosure Detection
WordPress plugin Site Kit by Google internal file system path is exposed. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress plugin Site Kit by Google internal file system path is exposed.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...
WordPress Site Kit by Google plugin < 1.176.0 - Editor+ Email Reporting Settings Update vulnerability
Editor+ Email Reporting Settings Update vulnerability discovered by Shashank in WordPress Plugin Site Kit by Google versions 1.176.0...
CVE-2026-10753
The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access such as Editors to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0...
CVE-2026-10753 Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update
The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access such as Editors to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0...
EUVD-2026-38695
The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access such as Editors to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0...
CVE-2026-10753
The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access such as Editors to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0...
CVE-2026-10753 Site Kit by Google < 1.176.0 - Editor+ Email Reporting Settings Update
The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access such as Editors to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0...
CVE-2026-10753
The Site Kit by Google WordPress plugin (versions before 1.176.0 ) contains a broken access control flaw in a REST API write endpoint . Because the endpoint fails to properly restrict access to administrators, lower-privileged users who have been granted dashboard sharing access, such as Editors ...
CVE-2026-10753: Undefined Security Weakness
The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access such as Editors to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0...
PT-2026-47059
Name of the Vulnerable Software and Affected Versions Site Kit by Google WordPress plugin versions prior to 1.176.0 Description A broken access control flaw exists in a REST API write endpoint that fails to properly restrict access to administrators. This allows lower-privileged users, such as...
