CyberRota Analysis
AI-GeneratedThe Search Atlas SEO plugin for WordPress versions prior to 2.6.12 is vulnerable due to a lack of capability and nonce checks in its AJAX handler, enabling any authenticated user, including those with low-level permissions like Subscribers, to manipulate the site's Google Indexing API. This vulnerability allows unauthorized URL submissions or removals from Google's index, potentially exhausting the site's indexing quota and impacting its search visibility. WordPress site administrators, especially those using the affected plugin, should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Search Atlas SEO WordPress plugin before 2.6.12 does not perform a capability or nonce check in one of its AJAX handlers, allowing any authenticated user such as a Subscriber to invoke the site's Google Indexing API integration, submitting or removing the site's URLs from Google's index and consuming its indexing quota.