Description
The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Rank Math SEO | < 1.0.280 | 1.0.280 |
References
- https://wpscan.com/vulnerability/b68d607d-aad8-46ad-a522-5eaeea738d8c/ exploit vdb-entry technical-description