Skip to content
OpenAdvisories

Vendor

rankmath

11 known vulnerabilities.

Products

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings 10 Rank Math SEO PRO 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-12714

    Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification

    The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_site_editor_homepage function in all versions up to, and including, 1.0.271. This makes it poss…

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS
  • Medium 4.3
    CVE-2024-13229

    Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion

    The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the update_metadata() function in all versions up to, and including, 1.0.235. This makes it possible…

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS
  • Medium 6.4
    CVE-2024-13227

    Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API

    The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient input sanitization and output escaping…

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS
  • Medium 6.5
    CVE-2024-9161

    Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete

    The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' function in all versions up to, and including, 1.0.228. This …

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS
  • Medium 6.4
    CVE-2024-4617

    Rank Math SEO with AI Best SEO Tools <= 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in versions up to, and including, 1.0.218 due to insufficient input sanitization and output escaping. This makes it possible for …

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS
  • Medium 6.4
    CVE-2024-4335

    Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and including, 1.0.217 due to insufficient input sanitization and output escaping. This makes it possib…

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS
  • Medium 6.4
    CVE-2024-3665

    Rank Math SEO with AI SEO Tools <= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper'

    The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's HowTo and FAQ widgets in all versions up to, and including, 1.0.216 due to insufficient input sanitization and output escaping on user suppl…

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS
  • Medium 6.4
    CVE-2024-2536

    Rank Math SEO with AI SEO Tools <= 1.0.214 - Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes

    The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214 due to insufficient input sanitization and output escaping on user supplied attr…

    rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Web / CMS