The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Seo By Rank Math Plugin | — | Update seo-by-rank-math plugin to version 1.0.41, or a newer patched version | May 15, 2025 | Mar 25, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub