CVE · Medium

CVE-2025-12714 — Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.271.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2025-12714 Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.271.1 Missing Authorization Medium 5.3 < 1.0.271.1 1.0.271.1 2026-05-28

CVE-2025-12714

The Rank Math SEO plugin for WordPress contains a security flaw that allows unauthorized access due to an oversight in the update_site_editor_homepage function's permission checks. This vulnerability affects versions 1.0.271 and earlier, enabling unauthenticated attackers to alter key settings such as homepage titles, meta descriptions, breadcrumbs labels, and social media metadata. As a result, malicious content can be displayed across all site pages that utilize breadcrumbs.

Based on public CVE data (MITRE/NVD).

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.