Rankmath
Rankmath Rank Math SEO: vulnerabilidades y CVE
Rankmath Rank Math SEO tiene 14 vulnerabilidades publicadas, 13 de ellas en los últimos 12 meses. 0 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE14
Últimos 12 meses13
Críticas0
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-77788 | Media (4.9) | 0.33% | — | 2 sept 2026 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, allowing users with the Author role and above to overwrite… |
| CVE-2026-77787 | Baja (2.7) | 0.28% | — | 2 sept 2026 | The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with… |
| CVE-2026-77785 | Baja (2.7) | 0.30% | — | 2 sept 2026 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request before returning its content and SEO metadata, allowing users… |
| CVE-2026-77784 | Baja (2.7) | 0.28% | — | 2 sept 2026 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified before updating its SEO indexing metadata, allowing users with the Author role and above to… |
| CVE-2026-77783 | Baja (3.7) | 0.26% | — | 2 sept 2026 | The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing unauthenticated visitors to disclose the schema and associated… |
| CVE-2026-77782 | Media (5.3) | 0.34% | — | 2 sept 2026 | The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated SEO metadata, allowing unauthenticated users to read the… |
| CVE-2026-77786 | Media (4.9) | 0.33% | — | 29 ago 2026 | The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the… |
| CVE-2026-81757 | Alta (7.2) | 0.78% | — | 28 ago 2026 | Author Remote Code Execution (RCE) in Rank Math SEO <= 1.0.276 versions. |
| CVE-2026-66702 | Alta (7.1) | 0.25% | — | 6 ago 2026 | Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions. |
| CVE-2026-34892 | Media (6.5) | 0.30% | — | 15 jun 2026 | Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions. |
| CVE-2025-12714 | Media (5.3) | 0.41% | — | 29 may 2026 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_site_editor_homepage function in all versions up to,… |
| CVE-2025-64351 | Media (4.3) | 0.22% | — | 31 oct 2025 | Insertion of Sensitive Information Into Sent Data vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Retrieve Embedded Sensitive Data.This issue affects Rank Math SEO: from n/a through <= 1.0.252.1. |
| CVE-2025-64350 | Baja (3.8) | 0.24% | — | 31 oct 2025 | Missing Authorization vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Rank Math SEO: from n/a through <= 1.0.252.1. |
| CVE-2024-11620 | Alta (7.2) | 0.69% | — | 28 nov 2024 | Improper Control of Generation of Code ('Code Injection') vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Code Injection.This issue affects Rank Math SEO: from n/a through <= 1.0.231. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.