Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
The Premium SEO WordPress plugin is malicious: it ships an unauthenticated backdoor that creates a hidden administrator account and, in some builds, also enables remote code execution, server-side request forgery and arbitrary front-end script/content injection, giving an unauthenticated attacker full control of the affected site.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-07 | 3 | Disclosure1Exploit1General1 |
| 2026-08-14 | 1 | Disclosure1 |
🛡️ #ExploitGrid Daily #Threat Digest Top Vulnerabilities (CVEs) of the day CVE-2026-11976 CVE-2026-14812 CVE-2026-5430 CVE-2026-65553 CVE-2026-66665 ..🧵👇
Post summary
The tweet only enumerates CVE identifiers without providing technical details, PoCs, exploits, or patch information.
⚡ Malicious WordPress Plugin: A Supply Chain Red Flag Perhaps the most alarming disclosure this week isn't a vulnerability in the traditional sense — it's a deliberate backdoor. CVE-2026-14812 (CVSS 10.0) documents that the "Premium…
Post summary
The post announces CVE-2026-14812, a malicious WordPress plugin that acts as a deliberate backdoor, highlighting a high-severity supply‑chain threat; it lists the CVE ID and CVSS but provides no PoC, exploit code, or mitigation details.
[CVE] CVE-2026-14812 [HIGH PRIORITY] #Premium SEO - Unauthenticated Backdoor (Admin Creation / RCE / SSRF / Content... 🔗 https://exploitgrid.net/cve/CVE-2026-14812
Post summary
CVE-2026-14812 is a high‑priority vulnerability that allows an unauthenticated attacker to create admin users, execute remote code, and perform SSRF attacks, with a publicly available exploit referenced via exploitgrid.
🚨Critical - Premium SEO WordPress Plugin Unauth Backdoor Admin Creation (CVE-2026-14812) Premium SEO plugin contains a built-in unauthenticated backdoor that programmatically creates a hidden administrator account, enabling immediate takeover. Some builds also expose RCE/SSRF and arbitrary front-end script/content injection, allowing full site and server compromise. 👉Affected: WordPress Premium SEO plugin (malicious builds; versions unknown)
Post summary
The text discloses a critical vulnerability in the Premium SEO WordPress plugin, detailing an unauthenticated backdoor that can create hidden admin accounts and potentially allow full site and server compromise via RCE/SSRF and script injection.