Advisories · Technology
Rank Math SEO.
Every CVE that names Rank Math SEO among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion
- Rank Math SEO
- Broken access control
- CVSS 3.5 Low
Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL
- Rank Math SEO
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter
- Rank Math SEO
- SQL injection
- CVSS 7.2 High
Rank Math SEO < 1.0.280 - Admin+ Arbitrary File Upload to RCE via Settings Import
- Rank Math SEO
- Unrestricted file upload
- CVSS 4.9 Medium
Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemas
- Rank Math SEO
- Broken access control
- CVSS 2.7 Low
Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk
- Rank Math SEO
- Broken access control
- CVSS 2.7 Low
Rank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities API
- Rank Math SEO
- Broken access control
- CVSS 2.7 Low
Rank Math SEO < 1.0.277 - Author+ Robots and Pillar Content Meta Update on Non-Owned Objects via mark_page_as
- Rank Math SEO
- Broken access control
- CVSS 3.7 Low
Rank Math SEO < 1.0.277 - Unauthenticated Non-Public Post Schema and Content Disclosure
- Rank Math SEO
- Broken access control
- CVSS 5.3 Medium
Rank Math SEO < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure via Post Metadata and llms.txt
- Rank Math SEO
- Information disclosure
- CVSS 4.9 Medium
Rank Math SEO < 1.0.277 - Editor+ Core Settings Modification via fix-site-seo Ability
- Rank Math SEO
- Broken access control
- CVSS 7.2 High
WordPress Rank Math SEO plugin <= 1.0.276 - Remote Code Execution (RCE) vulnerability
- Rank Math SEO
- Insecure deserialization
- CVSS 7.1 High
WordPress Rank Math SEO plugin <= 1.0.274.1 - Cross Site Scripting (XSS) vulnerability
- Rank Math SEO
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
WordPress Rank Math SEO plugin <= 1.0.271 - Broken Access Control vulnerability
- Rank Math SEO
- Broken access control
- CVSS 4.3 Medium
WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitive Data Exposure vulnerability
- Rank Math SEO
- Information disclosure
- CVSS 3.8 Low
WordPress Rank Math SEO plugin <= 1.0.252.1 - Broken Access Control vulnerability
- Rank Math SEO
- Broken access control
- CVSS 7.2 High
WordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability
- Rank Math SEO
- Code injection
- CVSS 5.5 Medium
Rank Math SEO < 1.0.219 - Authenticated Stored XSS
- Rank Math SEO
- CVSS 7.6 High
WordPress Rank Math SEO plugin <= 1.0.107.2 - Local File Inclusion vulnerability
- Rank Math SEO
- Path traversal
- CVSS 6.5 Medium
WordPress Rank Math SEO Plugin <= 1.0.119 is vulnerable to Cross Site Scripting (XSS)
- Rank Math SEO
- Cross-site scripting (XSS)