Security

All In One SEO Plugin Vulnerability Exposes AI Tokens on Over 3 Million WordPress Sites

A missing permission check in the All In One SEO WordPress plugin let contributor-level users grab a site's global AI access token. With over 3 million installs affected, here's what happened and what you need to do.