CVE WATCH / VULNERABILITY DETAIL
CVE-2026-76780
MEDIUMCVSS 6.3NVD feed
Published 28 October 2026 · tracked since 29 October 2026
Description
The Beyondseo plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.3.6. This is due to the plugin permanently granting the 'rankingcoach_write_redirectManager' (and sibling rankingcoach_write_* module capabilities) to the Contributor role via BaseModule::defi
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2025-30414 HIGH 7.1
- CVE-2026-92797 HIGH 8.8
- CVE-2026-101935 MEDIUM 6.1
- CVE-2026-77188 MEDIUM 6.4
- CVE-2026-77871 MEDIUM 6.4
- CVE-2026-92098 MEDIUM 6.1
- CVE-2026-76005 MEDIUM 6.5
- CVE-2026-118164 MEDIUM 6.4
- CVE-2026-116609 MEDIUM 6.5
- CVE-2026-116749 MEDIUM 6.4