CVE-2025-64350
- EPSS 0.02%
- Veröffentlicht 31.10.2025 11:42:17
- Zuletzt bearbeitet 20.01.2026 15:18:54
Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO: from n/a through <= 1.0.252.1.
CVE-2024-13227
- EPSS 0.16%
- Veröffentlicht 13.02.2025 05:15:13
- Zuletzt bearbeitet 24.02.2025 16:44:13
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient input sanitization and output...
CVE-2024-13229
- EPSS 0.13%
- Veröffentlicht 13.02.2025 05:15:13
- Zuletzt bearbeitet 24.02.2025 17:07:33
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the update_metadata() function in all versions up to, and including, 1.0.235. This makes it...
CVE-2024-9314
- EPSS 1.98%
- Veröffentlicht 05.10.2024 12:15:03
- Zuletzt bearbeitet 29.01.2025 18:52:17
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via deserialization of untrusted input 'set_redirections' function. This makes it possi...
CVE-2024-9161
- EPSS 23.13%
- Veröffentlicht 05.10.2024 12:15:02
- Zuletzt bearbeitet 29.01.2025 18:56:32
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' function in all versions up to, and including, 1.0.2...
CVE-2024-4627
- EPSS 0.1%
- Veröffentlicht 02.07.2024 06:15:04
- Zuletzt bearbeitet 21.11.2024 09:43:14
The Rank Math SEO WordPress plugin before 1.0.219 does not sanitise and escape some of its settings, which could allow users with access to the General Settings (by default admin, however such access can be given to lower roles via the Role Manager ...
CVE-2023-23888
- EPSS 0.64%
- Veröffentlicht 17.05.2024 07:15:49
- Zuletzt bearbeitet 15.10.2025 14:07:10
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affects Rank Math SEO: from n/a through 1.0.107.2.
CVE-2024-4617
- EPSS 0.27%
- Veröffentlicht 16.05.2024 11:15:48
- Zuletzt bearbeitet 21.11.2024 09:43:13
The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in versions up to, and including, 1.0.218 due to insufficient input sanitization and output escaping. This makes it poss...
CVE-2024-4335
- EPSS 0.17%
- Veröffentlicht 14.05.2024 15:43:19
- Zuletzt bearbeitet 15.10.2025 14:08:01
The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and including, 1.0.217 due to insufficient input sanitization and output escaping. This makes ...
CVE-2024-3665
- EPSS 0.12%
- Veröffentlicht 23.04.2024 10:15:06
- Zuletzt bearbeitet 15.10.2025 14:46:02
The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's HowTo and FAQ widgets in all versions up to, and including, 1.0.216 due to insufficient input sanitization and output escaping on u...