Now officially on WordPress.org

CVE Database / CVE-2024-13229

CVE · Medium

CVE-2024-13229 — Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.236

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-13229 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.236 Improper Access Control Medium 4.3 < 1.0.236 1.0.236 2025-02-12 —

CVE-2024-13229

The Rank Math SEO plugin for WordPress contains a vulnerability in versions up to 1.0.235 where the update_metadata() function lacks proper permission validation. Authenticated users with Contributor role or higher permissions can exploit this flaw to remove schema metadata from any post on the site. This oversight allows lower-privileged account holders to delete critical SEO metadata without authorization, potentially compromising site structure data and search engine optimization efforts.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings