Login Request a demo
SE
Product
Seo
by Rankmath · last CVE Feb 13, 2025
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 2High 2Medium 10Low 0
Severity
All severities14Critical2High2Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Seo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-9161
6.5
2%
Oct 5
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete
Affected: before 1.0.229
CVE-2019-14786
6.5
1%
Aug 15
The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter
Affected: before 1.0.27.1
CVE-2020-11515
6.1
3%
Apr 7
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured…
Affected: through 1.0.40.2
CVE-2024-13227
5.4
0%
Feb 13
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API
Affected: before 1.0.236
CVE-2024-4627
5.4
0%
Jul 2
Rank Math SEO < 1.0.219 - Authenticated Stored XSS
Affected: before 1.0.219
CVE-2024-4335
5.4
0%
May 9
Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting
Affected: before 1.0.218
CVE-2024-3665
5.4
0%
Apr 23
Rank Math SEO with AI SEO Tools <= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper'
Affected: before 1.0.217
CVE-2024-2536
5.4
0%
Apr 9
Rank Math SEO with AI SEO Tools <= 1.0.214 - Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes
Affected: before 1.0.215
CVE-2023-32600
5.4
0%
Aug 5
WordPress Rank Math SEO Plugin <= 1.0.119 is vulnerable to Cross Site Scripting (XSS)
Affected: before 1.0.119.1
CVE-2024-13229
4.3
0%
Feb 13
Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion
Affected: before 1.0.236
Showing 10