RA
Vendor
Rankmath
4 products with CVEs on record
18
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-1928
New
RM
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
rankmath
8.8–Oct 28Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution
CVE-2026-111862
RM
Rank Math SEO PRO
RankMath
9.8
1%
Oct 19Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code
CVE-2025-12714
RM
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
rankmath
5.3
0%
May 29Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification
CVE-2024-13229
SE
Seo
Rankmath
4.3
0%
Feb 13The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the…
CVE-2024-13227
SE
Seo
Rankmath
5.4
0%
Feb 13The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to,…
CVE-2024-9314
SE
Seo
Rankmath
7.2
1%
Oct 5The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via…
CVE-2024-9161
SE
Seo
Rankmath
6.5
2%
Oct 5The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the…
CVE-2024-4627
SE
Seo
Rankmath
5.4
0%
Jul 2The Rank Math SEO WordPress plugin before 1.0.219 does not sanitise and escape some of its settings, which could allow users with access to the General Settings (by default…
CVE-2023-23888
SE
Seo
Rankmath
8.8
1%
May 17Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affects Rank Math SEO:…
CVE-2024-4335
SE
Seo
Rankmath
5.4
0%
May 14The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and including, 1.0.217…
CVE-2024-3665
SE
Seo
Rankmath
5.4
0%
Apr 23The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's HowTo and FAQ widgets in all versions up to, and including,…
CVE-2024-2536
SE
Seo
Rankmath
5.4
0%
Apr 9The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214…
CVE-2023-32600
SE
Seo
Rankmath
5.4
0%
Aug 6Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rank Math SEO plugin <= 1.0.119 versions
CVE-2023-32800
SP
Seo Pro
Rankmath
6.1
0%
May 28Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in One Rank Math SEO PRO plugin <= 3.0.35 versions
CVE-2022-36376
SE
Seo
Rankmath
9.8
1%
Sep 9Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress
CVE-2020-11515
SE
Seo
Rankmath
6.1
3%
Apr 7The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured…
CVE-2020-11514
SE
Seo
Rankmath
9.8
11%
Apr 7The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke…
CVE-2019-14786
SE
Seo
Rankmath
6.5
1%
Aug 15The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter