https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T07:03:48.020779+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-123046 CVE-2026-123046 — SEOJuice < 2.12.0 - Administrator Account Creation via CSRF 2026-11-15T07:03:48.021736+00:00

Affected: Unknown SEOJuice

The SEOJuice WordPress plugin before 2.12.0 does not correctly restrict a REST API authentication filter, disabling WordPress's REST nonce protection for the whole site and allowing unauthenticated attackers to perform any cookie-authenticated REST action, including creating a new administrator account, by tricking a logged-in administrator into opening a crafted page (CSRF).