CVE-2026-10753 – Site Kit by Google < 1.176.0 – Editor+ Email Reporting Settings Update

CVE ID :CVE-2026-10753

Published : June 24, 2026, 6 a.m. | 1 hour, 44 minutes ago

Description :The Site Kit by Google WordPress plugin before 1.176.0 does not properly restrict a REST API write endpoint to administrators, allowing lower-privileged users who have been granted dashboard sharing access (such as Editors) to modify a site-wide Site Kit by Google WordPress plugin before 1.176.0 setting that should only be modifiable by administrators.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…