CVE-2026-16957
Slim SEO < 4.9.11 - Contributor+ Arbitrary Post Meta Disclosure
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-meta preview feature to posts the user is allowed to edit, verifying only read access, allowing users with the Contributor role to read arbitrary post meta, including protected and private keys, of published posts they do not own, including password-protected posts and posts of non-public post types.
| Vendor | unknown |
| Product | slim seo |
| Published | Aug 9, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown slim seo
Be the first to know when new unknown vulnerabilities affecting unknown slim seo are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Slim SEO
0 < 4.9.11
References
Credits
Shivamani Vastrala WPScan