CVE-2026-57429 describes a broken access control vulnerability in Slim SEO versions up to 4.6.2, where contributor-level users can bypass authorization restrictions. This vulnerability allows unauthorized access to sensitive information or functionality, leading to a high confidentiality impact. The CVSS 3.1 base score is 6.5, reflecting a medium severity. No vendor advisory or patch information is provided, and no known exploits are reported in the wild.

The vulnerability allows unauthorized access by users with contributor privileges, potentially exposing sensitive data (high confidentiality impact). There is no impact on integrity or availability. The attack can be performed remotely without user interaction, increasing the risk of exploitation if an attacker has contributor-level access.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict contributor-level user permissions and monitor for suspicious activity related to Slim SEO plugin usage.