Rank Math Seo (Unknown) - vulnerabilities (CVEs)
12 CVEs, 4 in the last 30 days, 2 known versions, newest CVE from 2026-10-14. Vendor: Unknown.
CVEs of Rank Math Seo
- CVE-2026-104751 - CVSS 5.3 (medium), 2026-10-14: The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing…
- CVE-2026-104753 - CVSS 4.1 (medium), 2026-10-10: The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege…
- CVE-2026-104752 - CVSS 7.2 (high), 2026-10-10: The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users…
- CVE-2026-104754 - CVSS 3.5 (low), 2026-10-10: The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view,…
- CVE-2026-77785 - CVSS 2.7 (low), 2026-09-02: The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request…
- CVE-2026-77784 - CVSS 2.7 (low), 2026-09-02: The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified before updating its SEO indexing…
- CVE-2026-77788 - CVSS 4.9 (medium), 2026-09-02: The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against,…
- CVE-2026-77783 - CVSS 3.7 (low), 2026-09-02: The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing…
- CVE-2026-77787 - CVSS 2.7 (low), 2026-09-02: The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the…
- CVE-2026-77782 - CVSS 5.3 (medium), 2026-09-02: The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated…
- CVE-2026-77786 - CVSS 4.9 (medium), 2026-08-29: The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires…
- CVE-2024-4627 - CVSS 5.5 (medium), 2024-07-02: The Rank Math SEO WordPress plugin before 1.0.219 does not sanitise and escape some of its settings, which could allow users with access to the General…
