CVE-2026-62113: WordPress Slim SEO plugin <= 4.10.0 - Insecure Direct Object References (IDOR) vulnerability
Published Sep 11, 2026
·Updated
Contributor Insecure Direct Object References (IDOR) in Slim SEO <= 4.10.0 versions.
Affected Software
1 affected component
WordPress Slim SEO plugin<=4.10.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Slim SEO Pluginto a version that resolves this vulnerability.Fixed in 4.10.1
Event History
Sep 11, 2026
CVE Published
via MITRE·06:12 PM
Data Sourced
via MITRE·06:12 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs Contributor-level privileges in WordPress. The vector is network-accessible, and no user interaction is required.
2
What security impact is indicated?
The supplied severity vector indicates low confidentiality impact, with no integrity or availability impact. The issue is rated medium severity with a 4.3 score.
3
Which plugin versions are affected?
Slim SEO versions up to and including 4.10.0 are identified as affected.