Rank Math Vulnerabilities and Affected Products
Vulnerabilities associated with AI SEO Tools to Dominate SEO Rankings Plugin for WordPress.
Products
Clear product- Rank Math SEO2 vulnerabilities
- seo2 vulnerabilities
- AI SEO Tools to Dominate SEO Rankings Plugin for WordPress1 vulnerability
- Rank Math SEO (WordPress plugin)1 vulnerability
- Rank Math SEO PRO1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-9161MEDIUM | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and DeleteThe Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' function in all versions up to, and including, 1.0.228. This makes it possible for unauthenticated attackers to insert new and update existing metadata beginning with 'rank_math', and delete arbitrary existing user metadata and term metadata. Deleting existing usermeta can cause a loss of access to th… | CVSS6.5v3.1 | EPSS2.13% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |