Boletines de Vulnerabilidades

CVE-2026-10753

   
Software afectado GOOGLE
 
The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should only be modifiable by administrators.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-10753