Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Rank Math SEO 1.0.277 Clear all filters
TI-2026-54177 CVE-2026-77788 · GHSA-4vrc-p2pf-p4qj

Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemas

Priority LOW 22

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, allowing users with the Author role and above to overwrite arbi…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00331 Published 2026-09-02 Fixed in 1.0.277 CWE-639
TI-2026-54176 CVE-2026-77787 · GHSA-vxch-jpr2-q2xp

Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk

Priority LOW 13

The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with t…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00281 Published 2026-09-02 Fixed in 1.0.277 CWE-862
TI-2026-54174 CVE-2026-77785 · GHSA-r8jc-g7jp-q2rh

Rank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities API

Priority LOW 13

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request before returning its content and SEO metadata, allowing users with…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00299 Published 2026-09-02 Fixed in 1.0.277 CWE-639
TI-2026-54173 CVE-2026-77784 · GHSA-rh8h-jgfm-8mq4

Rank Math SEO < 1.0.277 - Author+ Robots and Pillar Content Meta Update on Non-Owned Objects via mark_page_as

Priority LOW 13

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified before updating its SEO indexing metadata, allowing users with the Author role and above to alter…

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00281 Published 2026-09-02 Fixed in 1.0.277 CWE-639