Advisories · Technology

cleverplugins SEO Booster.

Every CVE that names cleverplugins SEO Booster among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-15660 CVE record

CVSS 4.3 Medium

SEO Booster <= 7.4.7 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Options Modification via handle_oauth_callback()
- cleverplugins SEO Booster
- Broken access control
Not analysed yet 19 Sept 2026
CVE-2026-15458 CVE record

CVSS 4.9 Medium

SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'sort_field' Parameter
- cleverplugins SEO Booster
- SQL injection
Not analysed yet 16 Jul 2026
CVE-2026-15445 CVE record

CVSS 4.9 Medium

SEO Booster <= 7.3.1 - Authenticated (Administrator+) SQL Injection via 'orderby' Parameter
- cleverplugins SEO Booster
- SQL injection
Not analysed yet 16 Jul 2026
CVE-2025-68019 CVE record

CVSS 6.5 Medium

WordPress SEO Booster plugin <= 6.1.8 - Broken Access Control vulnerability
- cleverplugins SEO Booster
- Broken access control
Not analysed yet 22 Jan 2026