This vulnerability, identified as CVE-2026-52714, is an unauthenticated broken access control issue in the SEO Plugin by Squirrly SEO, versions up to 12.4.16. It allows attackers without any privileges to perform unauthorized actions that could alter data integrity. The CVSS 3.1 score is 7.5, reflecting high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impact limited to integrity. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

The vulnerability allows unauthenticated attackers to bypass access controls, potentially modifying data or settings within the plugin, leading to integrity compromise. There is no impact on confidentiality or availability according to the CVSS vector. This could affect the trustworthiness of the SEO plugin's data or configuration.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin's administrative interfaces and monitor for suspicious activity related to the plugin. Avoid exposing the plugin to untrusted networks where possible.