{
 "id": "WPSEC-2026-2588",
 "url": "https://wpsec.com/vuln/WPSEC-2026-2588/",
 "json_url": "https://wpsec.com/vuln/WPSEC-2026-2588/advisory.json",
 "markdown_url": "https://wpsec.com/vuln/WPSEC-2026-2588/index.md",
 "title": "All in One SEO <= 5.0.4 - Authenticated (Administrator+) Privilege Escalation via Multisite 'blogId' Parameter",
 "description": "The All in One SEO plugin for WordPress is vulnerable to Privilege Escalation via the 'blogId' parameter of the 'tools/import-robots-txt' REST endpoint in versions 4.4.2 up to, and including, 5.0.4. This is due to the endpoint checking the required capability only on the current site and then switching to whichever blog the request names, or writing to the network-level options when 'network' is passed. This makes it possible for authenticated attackers with administrator-level access to a single site on a multisite network, who are not super admins, to import arbitrary robots.txt rules into other sites in the network or into the network-wide robots.txt settings. Only multisite installations are affected.",
 "plugin": {
  "slug": "all-in-one-seo-pack",
  "name": "All in One SEO",
  "full_name": "All in One SEO – AI SEO Plugin to Boost SEO Rankings & Traffic (Schema, Local SEO, Sitemap & SEO Insights)",
  "wordpress_org": "https://wordpress.org/plugins/all-in-one-seo-pack/",
  "advisories_url": "https://wpsec.com/vuln/plugin/all-in-one-seo-pack/",
  "attacksurface": "https://attacksurface.wpsec.com/plugin/all-in-one-seo-pack"
 },
 "type": "PRIV",
 "cwe": [
  "CWE-863"
 ],
 "cve": [],
 "cvss": {
  "version": "3.1",
  "score": 3.0,
  "vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:N",
  "severity": "Low"
 },
 "affected": {
  "ranges": [
   {
    "from": "4.4.2",
    "from_inclusive": true,
    "to": "5.0.5",
    "to_inclusive": false
   }
  ],
  "text": [
   "from 4.4.2 before 5.0.5"
  ]
 },
 "introduced_in": "4.4.2",
 "fixed_in": "5.0.5",
 "remediation": "Update to 5.0.5 or later.",
 "fix_released": "2026-11-04T13:34:00+00:00",
 "published": "2026-11-05T13:50:33+00:00",
 "updated": "2026-11-05T10:27:17.655265+00:00",
 "also_published_as": null,
 "references": [
  "https://wpsec.com/vuln/WPSEC-2026-2588/",
  "https://plugins.svn.wordpress.org/all-in-one-seo-pack/tags/5.0.5/",
  "https://wordpress.org/plugins/all-in-one-seo-pack/"
 ],
 "attacksurface_url": "https://attacksurface.wpsec.com/plugin/all-in-one-seo-pack",
 "source": "WPSec",
 "license": {
  "name": "CC BY 4.0",
  "url": "https://creativecommons.org/licenses/by/4.0/"
 },
 "usage": {
  "plugin": "High",
  "affected_versions": "High",
  "as_of": "2026-11-05"
 }
}