WordPress plugin

Search Atlas SEO – OTTO AI SEO Automation for WordPress security & vulnerabilities

Q: Does Search Atlas SEO – OTTO AI SEO Automation for WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 8 known vulnerabilities in Search Atlas SEO – OTTO AI SEO Automation for WordPress: 1 high, 7 medium. None are known to affect version null.

Q: How do I check which version of Search Atlas SEO – OTTO AI SEO Automation for WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerability?

CVE-2026-15946, published Sep 18, 2026: Search Atlas SEO <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification via handle_whitelabel_password_early Function. Severity: Medium (CVSS 4.3).

Q: Is any Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerability listed in CISA KEV?

No. None of the known Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerabilities is currently listed in the CISA KEV catalog.

metasync— active installsLast vulnerability Sep 18, 2026

No known unpatched vulnerabilities in the latest version

All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

8Known vulnerabilities

Critical0
High1
Medium7
Low0

Vulnerabilities per year

All Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerabilities

Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerabilities
Severity	Vulnerability	CVE	Published
Medium4.3	Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification via handle_whitelabel_password_early Function ≤2.6.23Update to 2.6.24	CVE-2026-15946	Sep 18
Medium4.3	Missing Authorization to Authenticated (Subscriber+) Site-Wide Option Modification via 'metasync_post_types' Parameter ≤2.6.23Update to 2.6.24	CVE-2026-15947	Sep 18
Medium4.3	Missing Authorization <2.6.24Update to 2.6.24	CVE-2026-15247	Sep 05
Medium4.3	Missing Authorization <2.6.12Update to 2.6.12	CVE-2026-15252	Jul 30
Medium6.1	Reflected Cross-Site Scripting ≤2.6.6Update to 2.6.7	CVE-2026-57357	Jul 01
High8.8	2.5.15 - Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover 2.4.4 – 2.5.15Update to 2.5.16	CVE-2025-14386	Jan 27
Medium6.4	Authenticated (Contributor+) Stored Cross-Site Scripting ≤2.5.4Update to 2.5.5	CVE-2025-58019	Sep 22, 2025
Medium4.4	Authenticated (Administrator+) Stored Cross-Site Scripting ≤1.8.2Update to 1.8.3	CVE-2024-47387	Sep 30, 2024

Medium4.3
Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification via handle_whitelabel_password_early Function
≤2.6.23Update to 2.6.24
CVE-2026-15946Sep 18
Medium4.3
Missing Authorization to Authenticated (Subscriber+) Site-Wide Option Modification via 'metasync_post_types' Parameter
≤2.6.23Update to 2.6.24
CVE-2026-15947Sep 18
Medium4.3
Missing Authorization
<2.6.24Update to 2.6.24
CVE-2026-15247Sep 05
Medium4.3
Missing Authorization
<2.6.12Update to 2.6.12
CVE-2026-15252Jul 30
Medium6.1
Reflected Cross-Site Scripting
≤2.6.6Update to 2.6.7
CVE-2026-57357Jul 01
High8.8
2.5.15 - Missing Authorization to Authenticated (Subscriber+) Authentication Bypass via Account Takeover
2.4.4 – 2.5.15Update to 2.5.16
CVE-2025-14386Jan 27
Medium6.4
Authenticated (Contributor+) Stored Cross-Site Scripting
≤2.5.4Update to 2.5.5
CVE-2025-58019Sep 22, 2025
Medium4.4
Authenticated (Administrator+) Stored Cross-Site Scripting
≤1.8.2Update to 1.8.3
CVE-2024-47387Sep 30, 2024

Search Atlas SEO – OTTO AI SEO Automation for WordPress: common questions

Does Search Atlas SEO – OTTO AI SEO Automation for WordPress have known vulnerabilities?

Yes. VulnCrest Radar lists 8 known vulnerabilities in Search Atlas SEO – OTTO AI SEO Automation for WordPress: 1 high, 7 medium. None are known to affect version null.

How do I check which version of Search Atlas SEO – OTTO AI SEO Automation for WordPress I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerability?

CVE-2026-15946, published Sep 18, 2026: Search Atlas SEO <= 2.6.23 - Missing Authorization to Authenticated (Subscriber+) Whitelabel Password Modification via handle_whitelabel_password_early Function. Severity: Medium (CVSS 4.3).

Is any Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerability listed in CISA KEV?

No. None of the known Search Atlas SEO – OTTO AI SEO Automation for WordPress vulnerabilities is currently listed in the CISA KEV catalog.