Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2023-32800
Disclosure Date: May 28, 2023 (last updated October 08, 2023)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in One Rank Math SEO PRO plugin <= 3.0.35 versions.
0
Attacker Value
Unknown
CVE-2022-36376
Disclosure Date: August 12, 2022 (last updated October 08, 2023)
Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress.
0
Attacker Value
Unknown
CVE-2020-11514
Disclosure Date: April 07, 2020 (last updated February 21, 2025)
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.
0
Attacker Value
Unknown
CVE-2020-11515
Disclosure Date: April 07, 2020 (last updated February 21, 2025)
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI).
0
Attacker Value
Unknown
CVE-2019-14786
Disclosure Date: August 15, 2019 (last updated November 27, 2024)
The Rank Math SEO plugin 1.0.27 for WordPress allows non-admin users to reset the settings via the wp-admin/admin-post.php reset-cmb parameter.
0
