Extension WordPress
Vulnérabilités Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
Cette page rassemble les failles publiées pour Rank Math SEO – AI SEO Tools to Dominate SEO Rankings, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
22 fiches
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 – Missing Authorization
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.0.271. This makes…
*-1.0.271
1.0.271.1
03/06/2026
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 – Missing Authorization to Unauthenticated Homepage Settings Modification
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_site_editor_homepage function in all versions up to, and including, 1.0.271.…
*-1.0.271
1.0.271.1
28/05/2026
Rank Math SEO <= 1.0.252.1 – Authenticated (Subscriber+) Information Exposure
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.252.1. This makes it possible for authenticated attackers, with Subscriber-level…
*-1.0.252.1
1.0.253
11/09/2025
Rank Math SEO <= 1.0.252.1 – Missing Authorization
The Rank Math SEO plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the track() function in versions up to, and including, 1.0.252.1. This makes it possible for authenticated attackers, with author-level…
*-1.0.252.1
1.0.253
11/09/2025
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 – Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient…
*-1.0.235
1.0.236
12/02/2025
Rank Math SEO <= 1.0.235 – Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the update_metadata() function in all versions up to, and…
*-1.0.235
1.0.236
12/02/2025
Rank Math SEO <= 1.0.231 – .htaccess File Manipulation to Remote Code Execution
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.0.231. This makes it possible for authenticated attackers, with Administrator-level…
*-1.0.231
1.0.232
22/11/2024
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 – Authenticated (Administrator+) PHP Object Injection
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via deserialization of untrusted input 'set_redirections' function. This makes…
*-1.0.228
1.0.229
04/10/2024
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 – Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' function in all versions up…
*-1.0.228
1.0.229
04/10/2024
Rank Math SEO <= 1.0.218 – Authenticated (Administrator+) Stored Cross-Site Scripting
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.218 due to insufficient input sanitization and…
*-1.0.218
1.0.219
11/06/2024
Rank Math SEO with AI Best SEO Tools <= 1.0.218 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in versions up to, and including, 1.0.218 due to insufficient input sanitization and output escaping. This…
*-1.0.218
1.0.219-beta
15/05/2024
Rank Math SEO with AI Best SEO Tools <= 1.0.217 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and including, 1.0.217 due to insufficient input sanitization and output escaping. This…
*-1.0.217
1.0.218
03/05/2024
Rank Math SEO with AI SEO Tools <= 1.0.216 – Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper'
The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's HowTo and FAQ widgets in all versions up to, and including, 1.0.216 due to insufficient input sanitization and…
*-1.0.216
1.0.217
22/04/2024
Rank Math SEO with AI SEO Tools <= 1.0.214 – Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes
The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214 due to insufficient input sanitization and output escaping…
*-1.0.214
1.0.215
21/03/2024
Rank Math SEO <= 1.0.119 – Authenticated (Contributor+) Stored Cross-Site Scripting
The Rank Math SEO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in versions up to, and including, 1.0.119 due to insufficient input sanitization and output escaping on user supplied attributes. This makes…
[*, 1.0.119.1)
1.0.119.1
17/07/2023
RankMath SEO <= 1.0.107.2 – Authenticated (Contributor+) Local File Inclusion
The RankMath SEO plugin for WordPress is vulnerable to Local File Inclusion via the 'update_schemas' and 'get_snippet_content' functions. This allows authenticated attackers, with contributor-level permissions and above, to include and execute arbitrary PHP files on the server, allowing…
*-1.0.107.2
1.0.107.3
30/01/2023
Rank Math SEO <= 1.0.95 – Server-Side Request Forgery
The Rank Math SEO plugin for WordPress is vulnerable to Server Side Request Forgery in versions up to, and including 1.0.95, due to insufficient user input validation.
*-1.0.95
1.0.95.1
12/08/2022
Rank Math SEO <= 1.0.42.1 – Missing Authorization
The Rank Math SEO plugin for WordPress is vulnerable to authorization bypass due to missing access controls on its "disable competitor plugins" functionality in versions up to, and including, 1.0.42.1. This makes it possible for subscriber-level attackers to…
[*, 1.0.42.2)
1.0.42.2
18/04/2020
Rank Math SEO <= 1.0.40.2 – Privilege Escalation via Unprotected REST API Endpoint
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.
[*, 1.0.41)
1.0.41
25/03/2020
Rank Math SEO <= 1.0.40.2 – Redirect Creation via Unprotected REST API Endpoint
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open…
*-1.0.40
1.0.41
25/03/2020
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.