Rank Math SEO
Rank Math SEO
Developer
1.0.280
Latest version
4,000,000
Installations
No date
Last updated
Vulnerability history
0 present
32 patched
11 Mitigation rules
- Unauthenticated SEO Analyzer Results Deletion vulnerability< 1.0.28014/10/2026
- Admin+ Arbitrary File Upload to RCE vulnerability< 1.0.28010/10/2026
- Admin+ SQLi vulnerability< 1.0.28010/10/2026
- Admin+ Stored XSS vulnerability< 1.0.28010/10/2026
- Author+ Robots and Pillar Content Meta Update on Non-Owned Objects vulnerability< 1.0.27703/09/2026
- Unauthenticated Non-Public Post Schema and Content Disclosure vulnerability< 1.0.27702/09/2026
- Author+ Non-Public Post Content Disclosure vulnerability< 1.0.27702/09/2026
- Author+ Term Metadata Update and Cross-Object Post Title Overwrite vulnerability< 1.0.27702/09/2026
- Author+ Arbitrary Post and User Metadata Overwrite vulnerability< 1.0.27702/09/2026
- Unauthenticated Password-Protected Post Content Disclosure vulnerability< 1.0.277.102/09/2026
- Editor+ Core Settings Modification vulnerability< 1.0.27729/08/2026
- Remote Code Execution (RCE) vulnerability<= 1.0.27627/08/2026
- Cross Site Scripting (XSS) vulnerability<= 1.0.274.131/07/2026
- Broken Access Control vulnerability<= 1.0.27103/06/2026
- Missing Authorization to Unauthenticated Homepage Settings Modification vulnerability<= 1.0.27128/05/2026
- Sensitive Data Exposure vulnerability<= 1.0.252.111/09/2025
- Broken Access Control vulnerability<= 1.0.252.111/09/2025
- Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion vulnerability<= 1.0.23513/02/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API vulnerability<= 1.0.23512/02/2025
- Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability<= 1.0.23122/11/2024
- Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete vulnerability<= 1.0.22807/10/2024
- Authenticated (Administrator+) PHP Object Injection vulnerability<= 1.0.22807/10/2024
- Authenticated Stored XSS vulnerability< 1.0.21902/07/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.0.21816/05/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 1.0.21705/05/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper' vulnerability<= 1.0.21623/04/2024
- Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes vulnerability<= 1.0.21422/03/2024
- Cross Site Scripting (XSS) vulnerability<= 1.0.11917/07/2023
- Local File Inclusion vulnerability<= 1.0.107.210/02/2023
- Server-Side Request Forgery (SSRF) vulnerability<= 1.0.9512/08/2022
- Authenticated Settings Reset vulnerability<= 1.0.2725/06/2019
- Cross-Site Scripting (XSS) vulnerabilities<= 1.0.2618/06/2019