Rank Math SEO – AI SEO Tools to Dominate SEO Rankings vulnerabilities

Product

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

by rankmath · last CVE Oct 28, 2026

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 2Medium 8Low 0

Severity

All severities10 Critical0 High2 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Rank Math SEO – AI SEO Tools to Dominate SEO Rankings to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-1928 New	8.8	1%	Oct 28	Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution Affected: through 1.0.276
CVE-2024-9314	7.2	1%	Oct 5	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection Affected: through 1.0.228
CVE-2024-9161	6.5	2%	Oct 5	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete Affected: through 1.0.228
CVE-2024-4617	6.4	0%	May 16	Rank Math SEO with AI Best SEO Tools <= 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.0.218
CVE-2024-13227	5.4	0%	Feb 13	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API Affected: through 1.0.235
CVE-2024-4335	5.4	0%	May 9	Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 1.0.217
CVE-2024-3665	5.4	0%	Apr 23	Rank Math SEO with AI SEO Tools <= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper' Affected: through 1.0.216
CVE-2024-2536	5.4	0%	Apr 9	Rank Math SEO with AI SEO Tools <= 1.0.214 - Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes Affected: through 1.0.214
CVE-2025-12714	5.3	0%	May 29	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification Affected: through 1.0.271
CVE-2024-13229	4.3	0%	Feb 13	Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion Affected: through 1.0.235