The SiteSEO – SEO Simplified WordPress plugin versions up to and including 1.3.1 suffer from a Missing Authorization vulnerability. This flaw allows authenticated users with Author-level access or higher to enable or disable SiteSEO features without proper permission checks.