PT-2026-84619 · WordPress · Rank Math Seo
CVSS v3.1
2.7
Low
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Rank Math SEO WordPress plugin versions prior to 1.0.277
Description
Insufficient verification of user permissions occurs when updating SEO indexing metadata. This allows users with the Author role or higher to modify metadata for content, taxonomy terms, and user profiles they do not own. Consequently, an attacker can remove content belonging to other users from the site sitemap and search engine index.
Recommendations
Update Rank Math SEO WordPress plugin to version 1.0.277 or later.
Exploit
Fix
IDOR
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rank Math Seo