CVE Database /
CVE-2024-9314
CVE · High
CVE-2024-9314 — Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.229
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-9314
|
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.229 |
Deserialization of Untrusted Data |
High
7.2
|
< 1.0.229
|
1.0.229 |
2024-10-04 |
—
|
CVE-2024-9314
A security flaw exists within Rank Math SEO's WordPress plugin, specifically affecting versions up to 1.0.228. The issue arises from a PHP Object Injection vulnerability that can be exploited via the 'set_redirections' function when processing untrusted input. This allows authenticated users with Administrator-level access or higher to inject arbitrary PHP code, potentially leading to data breaches and malicious actions if other vulnerabilities are present on the system.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings