CVE Database /
CVE-2024-9161
CVE · Medium
CVE-2024-9161 — Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.229
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-9161
|
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.229 |
Missing Authorization |
Medium
6.5
|
< 1.0.229
|
1.0.229 |
2024-10-04 |
—
|
CVE-2024-9161
A security flaw in Rank Math SEO plugin affects all versions up to 1.0.228, allowing unauthorized individuals to alter certain data without permission. This is due to an oversight in the 'update_metadata' function's authorization checks. As a result, attackers can modify metadata starting with 'rank_math', erase user and term information, potentially locking out administrators from accessing their dashboard.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings