Description
The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated SEO metadata, allowing unauthenticated users to read the content of password-protected posts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Rank Math SEO | < 1.0.277.1 | 1.0.277.1 |
References
- https://wpscan.com/vulnerability/e7a81d62-3fc7-4212-bd77-c559a6065808/ exploit vdb-entry technical-description