Medium · 6.5 CVE-2025-68019 EUVD-2026-4004GHSA-8vgv-6hfr-3prg

WordPress SEO Booster plugin <= 6.1.8 - Broken Access Control vulnerability

Published Jan 22, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Clever plugins Product: SEO Booster

Description

Missing Authorization vulnerability in cleverplugins SEO Booster seo-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SEO Booster: from n/a through <= 6.1.8.

Affected products

Vendor	Product	Affected	Fixed
cleverplugins	SEO Booster	≤ 6.1.8	—

References

https://patchstack.com/database/Wordpress/Plugin/seo-booster/vulnerability/wordpress-seo-booster-plugin-6-1-8-broken-access-control-vulnerability?_s_id=cve vdb-entry