{"id":"CVE-2026-15247","title":"The Search Atlas SEO  WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrit…","summary":"The Search Atlas SEO  WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrit…","severity":"medium","cvss":5.4,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","cwe":["CWE-862"],"published":"2026-09-05","updated":"2026-09-08","sourceUpdated":"2026-09-08T19:09:21.310","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-15247","references":[{"url":"https://wpscan.com/vulnerability/1618ba19-c410-440b-a2d9-1e1526614549/","label":"contact@wpscan.com"}],"tags":["nvd"],"epss":0.00209,"epssPercentile":0.11379,"ingestedAt":"2026-09-06T02:48:41.141Z","slug":"CVE-2026-15247","body":"## Overview\n\nThe Search Atlas SEO  WordPress plugin before 2.6.24 does not perform a nonce or capability check before processing a settings update in one of its early-priority handlers, allowing any authenticated user such as a Subscriber to overwrite or delete the site's stored Google service-account credentials.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":30,"depthScoreParts":{"impact":29.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":8165,"id":"CVE-2026-15247","ts":1788919965543,"field":"cvss","old":null,"new":"5.4"},{"seq":8164,"id":"CVE-2026-15247","ts":1788919965543,"field":"severity","old":"none","new":"medium"},{"seq":7974,"id":"CVE-2026-15247","ts":1788919253406,"field":"cvss","old":"5.4","new":null},{"seq":7973,"id":"CVE-2026-15247","ts":1788919253406,"field":"severity","old":"medium","new":"none"},{"seq":7783,"id":"CVE-2026-15247","ts":1788916326246,"field":"cvss","old":null,"new":"5.4"},{"seq":7782,"id":"CVE-2026-15247","ts":1788916326246,"field":"severity","old":"none","new":"medium"},{"seq":7592,"id":"CVE-2026-15247","ts":1788915271054,"field":"cvss","old":"5.4","new":null},{"seq":7591,"id":"CVE-2026-15247","ts":1788915271054,"field":"severity","old":"medium","new":"none"},{"seq":7401,"id":"CVE-2026-15247","ts":1788912686002,"field":"cvss","old":null,"new":"5.4"},{"seq":7400,"id":"CVE-2026-15247","ts":1788912686002,"field":"severity","old":"none","new":"medium"},{"seq":7210,"id":"CVE-2026-15247","ts":1788911303370,"field":"cvss","old":"5.4","new":null},{"seq":7209,"id":"CVE-2026-15247","ts":1788911303370,"field":"severity","old":"medium","new":"none"},{"seq":7017,"id":"CVE-2026-15247","ts":1788909054933,"field":"cvss","old":null,"new":"5.4"},{"seq":7016,"id":"CVE-2026-15247","ts":1788909054933,"field":"severity","old":"none","new":"medium"},{"seq":6829,"id":"CVE-2026-15247","ts":1788907367674,"field":"cvss","old":"5.4","new":null},{"seq":6828,"id":"CVE-2026-15247","ts":1788907367674,"field":"severity","old":"medium","new":"none"},{"seq":6637,"id":"CVE-2026-15247","ts":1788905422361,"field":"cvss","old":null,"new":"5.4"},{"seq":6636,"id":"CVE-2026-15247","ts":1788905422361,"field":"severity","old":"none","new":"medium"},{"seq":6455,"id":"CVE-2026-15247","ts":1788903436139,"field":"cvss","old":"5.4","new":null},{"seq":6454,"id":"CVE-2026-15247","ts":1788903436139,"field":"severity","old":"medium","new":"none"},{"seq":6251,"id":"CVE-2026-15247","ts":1788901790701,"field":"cvss","old":null,"new":"5.4"},{"seq":6250,"id":"CVE-2026-15247","ts":1788901790701,"field":"severity","old":"none","new":"medium"},{"seq":6081,"id":"CVE-2026-15247","ts":1788899548861,"field":"cvss","old":"5.4","new":null},{"seq":6080,"id":"CVE-2026-15247","ts":1788899548861,"field":"severity","old":"medium","new":"none"},{"seq":6011,"id":"CVE-2026-15247","ts":1788898240427,"field":"cvss","old":null,"new":"5.4"},{"seq":6010,"id":"CVE-2026-15247","ts":1788898240427,"field":"severity","old":"none","new":"medium"}]}