CVE-2026-77784 in Rank Math SEO Plugininformation

Résumé

par MITRE • 02/09/2026

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified before updating its SEO indexing metadata, allowing users with the Author role and above to alter that metadata on content, taxonomy terms and user profiles they do not own, and to remove other users' content from the site's sitemap and search engine index.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

WPScan

Réserver

21/08/2026

Divulgation

02/09/2026

Modérer

accepté

Entrée

VDB-398024

CPE

prêt

EPSS

0.00000

KEV

non

Activités

faible

Sources

Do you know our Splunk app?

Download it now for free!