RankMath

Products

ProductCVEsExploitedLatest
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings10–Oct 28, 2026
Rank Math SEO PRO1–Oct 19, 2026

Exploited and recent CVEs

  • CVE-2026-1928 High 8.8 Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution 0.5%
  • CVE-2026-111862 Critical 9.8 Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code 0.7%
  • CVE-2025-12714 Medium 5.3 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification 0.4%
  • CVE-2024-13229 Medium 4.3 Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion 0.5%
  • CVE-2024-13227 Medium 6.4 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API 0.5%
  • CVE-2024-9314 High 7.2 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Authenticated (Administrator+) PHP Object Injection 0.8%
  • CVE-2024-9161 Medium 6.5 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete 2.1%
  • CVE-2024-4617 Medium 6.4 Rank Math SEO with AI Best SEO Tools <= 1.0.218 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-4335 Medium 6.4 Rank Math SEO with AI Best SEO Tools <= 1.0.217 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
  • CVE-2024-3665 Medium 6.4 Rank Math SEO with AI SEO Tools <= 1.0.216 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleWrapper' 0.5%
  • CVE-2024-2536 Medium 6.4 Rank Math SEO with AI SEO Tools <= 1.0.214 - Authenticated(Contributor+) Stored Cross-Site Scripting via HowTo block attributes 0.3%