CVE-2025-12714

Name of the Vulnerable Software and Affected Versions Rank Math SEO versions prior to 1.0.272

Description The Rank Math SEO plugin for WordPress allows unauthorized access because the update site editor homepage() function lacks a capability check. This allows unauthenticated attackers to modify various plugin settings, such as the homepage title, meta description, breadcrumbs label, and social media metadata. Such modifications can negatively impact SEO rankings and enable the display of malicious content on all site pages where breadcrumbs are implemented.

Recommendations Update the plugin to version 1.0.272 or later. As a temporary workaround, restrict access to the update site editor homepage() function until the update is applied.