RA
Vendor
Rankmath
18
CVEs
0
On KEV
2
New 30D
Products
RM9.8
Rank Math SEO PRO
RankMath
1 CVEs0 on KEV1 new
RM8.8
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
rankmath
2 CVEs0 on KEV1 new
SE9.8
Seo
Rankmath
14 CVEs0 on KEV0 new
SP6.1
Seo Pro
Rankmath
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-1928 New | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 8.8 | Oct 28 | Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution |
| CVE-2026-111862 | RM Rank Math SEO PRO RankMath | 9.8 | Oct 19 | Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code |
| CVE-2025-12714 | RM Rank Math SEO – AI SEO Tools to Dominate SEO Rankings rankmath | 5.3 | May 29 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification |
| CVE-2024-13229 | SE Seo Rankmath | 4.3 | Feb 13 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the… |
| CVE-2024-13227 | SE Seo Rankmath | 5.4 | Feb 13 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to,… |
| CVE-2024-9314 | SE Seo Rankmath | 7.2 | Oct 5 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via… |
| CVE-2024-9161 | SE Seo Rankmath | 6.5 | Oct 5 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the… |
| CVE-2024-4627 | SE Seo Rankmath | 5.4 | Jul 2 | The Rank Math SEO WordPress plugin before 1.0.219 does not sanitise and escape some of its settings, which could allow users with access to the General Settings (by default… |
| CVE-2023-23888 | SE Seo Rankmath | 8.8 | May 17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affects Rank Math SEO:… |
| CVE-2024-4335 | SE Seo Rankmath | 5.4 | May 14 | The Rank Math SEO with AI Best SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘textAlign’ parameter in versions up to, and including, 1.0.217… |
| CVE-2024-3665 | SE Seo Rankmath | 5.4 | Apr 23 | The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's HowTo and FAQ widgets in all versions up to, and including,… |
| CVE-2024-2536 | SE Seo Rankmath | 5.4 | Apr 9 | The Rank Math SEO with AI SEO Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HowTo block attributes in all versions up to, and including, 1.0.214… |
| CVE-2023-32600 | SE Seo Rankmath | 5.4 | Aug 6 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rank Math SEO plugin <= 1.0.119 versions |
| CVE-2023-32800 | SP Seo Pro Rankmath | 6.1 | May 28 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in One Rank Math SEO PRO plugin <= 3.0.35 versions |
| CVE-2022-36376 | SE Seo Rankmath | 9.8 | Sep 9 | Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress |
| CVE-2020-11515 | SE Seo Rankmath | 6.1 | Apr 7 | The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured… |
| CVE-2020-11514 | SE Seo Rankmath | 9.8 | Apr 7 | The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke… |
| CVE-2019-14786 | SE Seo Rankmath | 6.5 | Aug 15 | The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter |
