RM
Product
Rank Math SEO
11
CVEs
0
On KEV
7.2
Max CVSS
4
New 30D
Severity mix
Critical 0High 1Medium 5Low 5
Watch
Add Rank Math SEO to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-104752 | 7.2 | Oct 10 | Rank Math SEO < 1.0.280 - Admin+ Arbitrary File Upload to RCE via Settings Import Affected: before 1.0.280 |
| CVE-2026-104751 | 5.3 | Oct 14 | Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion Affected: before 1.0.280 |
| CVE-2026-77782 | 5.3 | Sep 2 | Rank Math SEO < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure via Post Metadata and llms.txt Affected: before 1.0.277.1 |
| CVE-2026-77788 | 4.9 | Sep 2 | Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemas Affected: 1.0.48 before 1.0.277 |
| CVE-2026-77786 | 4.9 | Aug 29 | Rank Math SEO < 1.0.277 - Editor+ Core Settings Modification via fix-site-seo Ability Affected: 1.0.271 before 1.0.277 |
| CVE-2026-104753 | 4.1 | Oct 10 | Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter Affected: before 1.0.280 |
| CVE-2026-77783 | 3.7 | Sep 2 | Rank Math SEO < 1.0.277 - Unauthenticated Non-Public Post Schema and Content Disclosure Affected: 1.0.48 before 1.0.277 |
| CVE-2026-104754 | 3.5 | Oct 10 | Rank Math SEO < 1.0.280 - Admin+ Stored XSS via Redirection Source URL Affected: before 1.0.280 |
| CVE-2026-77787 | 2.7 | Sep 2 | Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk Affected: 1.0.255 before 1.0.277 |
| CVE-2026-77785 | 2.7 | Sep 2 | Rank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities API Affected: 1.0.272 before 1.0.277 |
| CVE-2026-77784 | 2.7 | Sep 2 | Rank Math SEO < 1.0.277 - Author+ Robots and Pillar Content Meta Update on Non-Owned Objects via mark_page_as Affected: before 1.0.277 |
Showing 11