What is GHSA-qhv8-f57q-hvv7?

GHSA-qhv8-f57q-hvv7 is a security advisory published by GitHub Security Advisories with High severity. The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of...

Which CVE IDs does GHSA-qhv8-f57q-hvv7 cover?

GHSA-qhv8-f57q-hvv7 covers the following CVE IDs: CVE-2026-16257. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qhv8-f57q-hvv7?

GHSA-qhv8-f57q-hvv7 has a CVSS v3 base score of 8.2, published by GitHub Security Advisories.

GHSA-qhv8-f57q-hvv7HighCVSS 8.2

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of...

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-16257 →

📋 Description

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowing them to create arbitrary posts and pages and to disclose author account and taxonomy information.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-16257
https://wpscan.com/vulnerability/89c32854-1cf1-4fe9-a6d0-6244be2dcc03
https://github.com/advisories/GHSA-qhv8-f57q-hvv7