CVE-2026-76780 | rankingcoach Beyondseo Plugin up to 1.3.6 on WordPress REST Endpoint defineCapabilities privileges management

October 28, 2026 Yanac

A vulnerability labeled as problematic has been found in rankingcoach Beyondseo Plugin up to 1.3.6 on WordPress. The affected element is the function BaseModule::defineCapabilities of the component REST Endpoint. The manipulation results in improper privilege management.

This vulnerability is reported as CVE-2026-76780. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More