CVE · High

CVE-2023-23888 — Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.119.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-23888 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.119.1 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') High 7.6 < 1.0.119.1 1.0.119.1 2023-01-30

CVE-2023-23888

The Rank Math SEO plugin contains a local file inclusion flaw that could enable attackers to access and display local files from the affected website, potentially exposing sensitive information like database credentials that could lead to complete database compromise. This vulnerability was identified by Rafie Muhammad and reported through Patchstack, affecting versions below 1.0.107.3. Users should upgrade to version 1.0.107.3 or later to remediate the issue.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.