Vulnerabilities (CVE)

Filtered by vendor Rankmath Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-32600 1 Rankmath 1 Seo 2023-08-10 N/A 5.4 MEDIUM
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Rank Math SEO plugin <= 1.0.119 versions.
CVE-2019-14786 1 Rankmath 1 Seo 2021-07-21 4.0 MEDIUM 6.5 MEDIUM
The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter.
CVE-2020-11515 1 Rankmath 1 Rankmath 2020-04-07 5.8 MEDIUM 6.1 MEDIUM
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI).