MAIO vulnerabilities

CVEs whose affected-version data names the MAIO package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109930Medium· 5.3

today

MAIO < 7.3.22 - Unauthenticated Crawl Analytics Disclosure via Hardcoded API Key

The MAIO WordPress plugin before 7.3.22 does not properly restrict access to its analytics data, treating a credential value shipped verbatim in its own public source as a valid API key, which allows unauthenticated attackers to retrieve…

▾ Sunlitvia CVEORG