CVE · Medium

CVE-2024-2536 — Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.215

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2024-2536 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.215 Improper Input Validation Medium 5.4 < 1.0.215 1.0.215 2024-03-21

CVE-2024-2536

The Rank Math SEO plugin prior to version 1.0.215 contains a cross-site scripting vulnerability that enables attackers to embed harmful code into affected websites. When visitors access the site, the injected scripts execute and can perform actions including redirecting users, displaying unwanted advertisements, or delivering arbitrary HTML content. The flaw was identified by security researcher Ngô Thiên An and has been resolved in version 1.0.215 and later releases.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.