CVE-2026-39697
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
The MAIO – The new AI GEO / SEO tool plugin for WordPress up to version 6.2.8 has a missing authorization vulnerability that allows exploiting incorrectly configured access control security levels.
Risk Assessment
The organization risks unauthorized access to GEO/SEO functions, potentially leading to data manipulation and information leakage.
Recommendation
Update the MAIO plugin to the latest version. Restrict access to GEO/SEO tools to authorized users only.
Original NVD description (English source)
Missing Authorization vulnerability in HBSS Technologies MAIO – The new AI GEO / SEO tool maio-the-new-ai-geo-seo-tool allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MAIO – The new AI GEO / SEO tool: from n/a through <= 6.2.8.