critical
CVE-2026-14812
Premium-SEO is a malicious WordPress plugin, not a compromised one: every build ships an unauthenticated backdoor that creates a hidden administrator account (login prefix resource_desk_), proxies attacker-supplied URLs (SSRF), injects doorway pages and C2-supplied <head>/<footer> markup, and in 6.x overwrites its own file with attacker PHP (RCE)
- Severity
- critical
- Affected product
- Premium-SEO
- Affected versions
- Premium-SEO ≥ 0
- Fixed in
- Premium-SEO none - remove the plugin; there is no clean release
- Detection basis
- Component version range
- Shipped rule
- Premium-SEO: Premium-SEO is a malicious WordPress plugin, not a compromised one: every build ships an unauthenticated backdoor that creates a hidden administrator account (login prefix resource_desk_), proxies attacker-supplied URLs (SSRF), injects doorway pages and C2-supplied <head>/<footer> markup, and in 6.x overwrites its own file with attacker PHP (RCE)
- Added to NewScan
- 2026-08-07
- Detected by
- NewScan — free, self-hosted
How NewScan reports it
COMPONENT VERSION RANGE
NewScan fingerprints Premium-SEO from its response and reports this CVE when the detected version falls inside the affected range below.
References
Scan for this yourself — local, in-band scanning is free.
Get NewScan (FREE) →Review the measured benchmark, then use the verified remediation process.