Boletines de Vulnerabilidades |
CVE-2026-10753 |
|
| Software afectado | |
| The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should only be modifiable by administrators. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-10753 | |














