WordPress security by component
Rank Math SEO
Plugin description
Rank Math SEO is a WordPress component with 17 published CVE records in this archive. The latest tracked vulnerability was published Jun 15, 2026; the highest CVE/CNA score is 9.8.
Plugin slug:
seo-by-rank-mathLatest vulnerability
CVE-2026-34892: Rank Math SEO: A security weakness
Rank Math SEO is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.0.271.
| Safe version |
|
||
|---|---|---|---|
| Jun 15, 2026 |
CVE-2026-34892
Rank Math SEO: A security weakness
Rank Math SEO is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 1.0.271.
|
1.0.271.1 |
CVE6.5
NVDPending
|
| May 29, 2026 |
CVE-2025-12714
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings: A security weakness
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.0.271.
|
> 1.0.271 |
CVE5.3
NVDPending
|
| Oct 31, 2025 |
CVE-2025-64351
Rank Math SEO: A security weakness
Rank Math SEO is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 31, 2025 |
CVE-2025-64350
Rank Math SEO: A security weakness
Rank Math SEO is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE3.8
NVDPending
|
| Feb 13, 2025 |
CVE-2024-13229
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings: A security weakness
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Feb 13, 2025 |
CVE-2024-13227
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings: Cross-site scripting
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Nov 28, 2024 |
CVE-2024-11620
Rank Math SEO: Code execution
Rank Math SEO is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE7.2
NVDPending
|
| Oct 05, 2024 |
CVE-2024-9314
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings: Code execution
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings is affected by code execution. Exploitation requires at least administrator-level access. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE7.2
NVDPending
|
| Oct 05, 2024 |
CVE-2024-9161
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings: A security weakness
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| May 17, 2024 |
CVE-2023-23888
Rank Math SEO: Filesystem traversal
Rank Math SEO is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.6
NVD8.8
|
| May 16, 2024 |
CVE-2024-4617
Rank Math SEO with AI Best SEO Tools: Cross-site scripting
Rank Math SEO with AI Best SEO Tools is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| May 14, 2024 |
CVE-2024-4335
Rank Math SEO with AI Best SEO Tools: Cross-site scripting
Rank Math SEO with AI Best SEO Tools is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Apr 23, 2024 |
CVE-2024-3665
Rank Math SEO with AI SEO Tools: Cross-site scripting
Rank Math SEO with AI SEO Tools is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVD5.4
|
| Aug 06, 2023 |
CVE-2023-32600
Seo By Rank Math: Cross-site scripting
Seo By Rank Math is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVD5.4
|
| Sep 09, 2022 |
CVE-2022-36376
Seo By Rank Math: Server-side request forgery
Seo By Rank Math is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
|
See mitigation notes |
CVE6.8
NVD9.8
|
| Apr 07, 2020 |
CVE-2020-11515
Seo By Rank Math: An open redirect
Seo By Rank Math is affected by an open redirect. The vulnerable path is reachable without authentication. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
|
See mitigation notes |
CVE6.1
NVD6.1
|
| Apr 07, 2020 |
CVE-2020-11514
Seo By Rank Math: A security weakness
Seo By Rank Math is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE9.8
NVD9.8
|