CVE-2026-77786 in SEO Pluginالمعلومات

الملخص

بحسب MITRE • 29/08/2026

The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the Editor role to modify site-wide core WordPress settings that are reserved to administrators.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

مسؤول

WPScan

حجز

21/08/2026

إفشاء

29/08/2026

الاعتدال

تمت الموافقة

إدخال

VDB-397002

EPSS

0.00000

KEV

لا

النشاطات

منخفض جدًا

القطاع

Hostingprovider

المصادر

Interested in the pricing of exploits?

See the underground prices here!