PT-2026-84618 · WordPress · Rank Math Seo
CVSS v3.1
3.7
Low
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Rank Math SEO WordPress plugin versions prior to 1.0.277
Description
The plugin fails to verify if a post is publicly viewable before rendering its schema on the front end. This allows unauthenticated visitors to disclose the schema and associated content of posts that are in draft, pending, private, scheduled, or password-protected status.
Recommendations
Update Rank Math SEO WordPress plugin to version 1.0.277 or later.
Exploit
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rank Math Seo