CVE-2026-12082
Received Received - Intake

Unauthenticated Permalink Modification in Praison AI SEO WordPress Plugin

Publication date: 2026-07-23

Last updated on: 2026-07-23

Assigner: WPScan

Description
The Praison AI SEO WordPress plugin before 5.0.7 does not perform authorization checks on several of its REST API routes, allowing unauthenticated users to modify the permalink of any published post and to read Praison AI SEO WordPress plugin before 5.0.7 configuration data.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-23
Last Modified
2026-07-23
Generated
2026-07-23
AI Q&A
2026-07-23
EPSS Evaluated
N/A
NVD
CVE-2026-12082
EUVD
EUVD-2026-47884

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
praison ai_seo_wordpress_plugin to 5.0.7 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Praison AI SEO WordPress plugin before version 5.0.7 has missing authorization checks in its REST API routes. This allows unauthenticated users to modify the permalink of any published post and access plugin configuration data without proper permissions.

Detection Guidance

Check the installed version of the Praison AI SEO WordPress plugin. If it is below 5.0.7, the system is vulnerable. Use WordPress admin panel or run: wp plugin list --name=ai-seo to verify the version.

Impact Analysis

An attacker could change the permalinks of published posts, potentially breaking links and affecting SEO rankings. They could also read sensitive plugin settings, which might include security or configuration details.

Compliance Impact

This vulnerability could potentially affect compliance with GDPR and HIPAA by allowing unauthorized modification of published post permalinks and exposure of plugin configuration data. Unauthorized changes to permalinks may alter content accessibility, while disclosure of plugin settings could expose sensitive data handling practices. However, the specific impact depends on how the plugin is used in a given environment.

Mitigation Strategies

Update the Praison AI SEO WordPress plugin to version 5.0.7 or later immediately. Disable the plugin temporarily if an update is not immediately available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-12082. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart