Is CVE-2026-10755 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-10755?

CVE-2026-10755 has a CVSS v3 severity of LOW (2.7).

Back

CVE-2026-10755

Description

The All in One SEO WordPress plugin before 4.9.9 does not correctly restrict access to some of its AI integration REST API endpoints, allowing users with low-level privileges such as Contributors to overwrite or reset the site-wide AI integration state.