PLUGIN SECURITY
Is Seo By Rank Math safe?
Grow your organic traffic and AI visibility with powerful SEO tools, XML sitemaps, Schema automation, and built-in AI SEO, all in one place.
What this plugin does
- Slug:
seo-by-rank-math - Author: Rank Math SEO
- 4000000+ active installs
- 96/100 rating (7494 reviews on wordpress.org)
- 191276527 all-time downloads
- On WordPress.org since 2018-11-19
google search consoleredirectionschemaseoxml sitemap
Maintenance status
- Latest known version: 1.0.275
- Last updated: 2026-08-11 10:50am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
23 known CVEs on file for Seo By Rank Math. Reported between 2019 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2026-81757 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.277 | Deserialization of Untrusted Data | High 7.2 | < 1.0.277 | 1.0.277 | 2026-08-28 | ⚠ update needed |
| CVE-2026-66702 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.275 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 1.0.275 | 1.0.275 | 2026-07-31 | ✓ fixed in latest |
| CVE-2026-34892 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.271.1 | Missing Authorization | Medium 6.5 | < 1.0.271.1 | 1.0.271.1 | 2026-06-03 | ✓ fixed in latest |
| CVE-2025-12714 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.271.1 | Missing Authorization | Medium 5.3 | < 1.0.271.1 | 1.0.271.1 | 2026-05-28 | ✓ fixed in latest |
| CVE-2025-64351 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.253 | Insertion of Sensitive Information Into Sent Data | Medium 4.3 | < 1.0.253 | 1.0.253 | 2025-09-11 | ✓ fixed in latest |
| CVE-2025-64350 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.253 | Missing Authorization | Low 3.8 | < 1.0.253 | 1.0.253 | 2025-09-11 | ✓ fixed in latest |
| CVE-2024-13227 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.236 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.0.236 | 1.0.236 | 2025-02-12 | ✓ fixed in latest |
| CVE-2024-13229 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.236 | Improper Access Control | Medium 4.3 | < 1.0.236 | 1.0.236 | 2025-02-12 | ✓ fixed in latest |
+ 24 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-11620 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.232 | Improper Control of Generation of Code ('Code Injection') | High 7.2 | < 1.0.232 | 1.0.232 | 2024-11-22 | ✓ fixed in latest |
| CVE-2024-9161 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.229 | Missing Authorization | Medium 6.5 | < 1.0.229 | 1.0.229 | 2024-10-04 | ✓ fixed in latest |
| CVE-2024-9314 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.229 | Deserialization of Untrusted Data | High 7.2 | < 1.0.229 | 1.0.229 | 2024-10-04 | ✓ fixed in latest |
| CVE-2024-4627 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.219 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.0.219 | 1.0.219 | 2024-06-11 | ✓ fixed in latest |
| CVE-2024-4617 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.219 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.0.219 | 1.0.219 | 2024-05-15 | ✓ fixed in latest |
| CVE-2024-4335 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.218 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.0.218 | 1.0.218 | 2024-05-03 | ✓ fixed in latest |
| CVE-2024-3665 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.217 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.4 | < 1.0.217 | 1.0.217 | 2024-04-22 | ✓ fixed in latest |
| CVE-2024-2536 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.215 | Improper Input Validation | Medium 5.4 | < 1.0.215 | 1.0.215 | 2024-03-21 | ✓ fixed in latest |
| CVE-2023-32600 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.119.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.0.119.1 | 1.0.119.1 | 2023-07-17 | ✓ fixed in latest |
| CVE-2023-23888 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.119.1 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | High 7.6 | < 1.0.119.1 | 1.0.119.1 | 2023-01-30 | ✓ fixed in latest |
| CVE-2022-36376 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.95.1 | Server-Side Request Forgery (SSRF) | Medium 6.8 | < 1.0.95.1 | 1.0.95.1 | 2022-08-12 | ✓ fixed in latest |
| — | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.42.2 | — | Unknown | < 1.0.42.2 | 1.0.42.2 | 2020-04-18 | ✓ fixed in latest |
| CVE-2020-11514 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.0.41 | Missing Authorization | Critical 9.8 | < 1.0.41 | 1.0.41 | 2020-03-25 | ✓ fixed in latest |
| CVE-2020-11515 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.0.41 | URL Redirection to Untrusted Site ('Open Redirect') | Medium 6.1 | < 1.0.41 | 1.0.41 | 2020-03-25 | ✓ fixed in latest |
| — | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.27.1 | — | Unknown | < 1.0.27.1 | 1.0.27.1 | 2019-06-25 | ✓ fixed in latest |
| CVE-2019-14786 | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.27.1 | Missing Authorization | Medium 6.5 | < 1.0.27.1 | 1.0.27.1 | 2019-06-21 | ✓ fixed in latest |
| — | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.27 | — | Unknown | < 1.0.27 | 1.0.27 | 2019-06-18 | ✓ fixed in latest |
| — | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.27 | — | Unknown | < 1.0.27 | 1.0.27 | 2019-06-18 | ✓ fixed in latest |
| — | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.42.2 | — | Unknown | < 1.0.42.2 | 1.0.42.2 | — | ✓ fixed in latest |
| — | Rank Math SEO – AI SEO Tools to Dominate SEO Rankings [seo-by-rank-math] < 1.0.27 | — | Unknown | < 1.0.27 | 1.0.27 | — | ✓ fixed in latest |
| — | Seo by Rank Math <= 1.0.26 - XSS Issues | — | Unknown | < 1.0.27 | 1.0.27 | — | ✓ fixed in latest |
| — | Rank Math 0.9~1.0.42.1 - Authenticated Missing Access Controls to Disable Competitor Plugins | — | Unknown | < 1.0.42.2 | 1.0.42.2 | — | ✓ fixed in latest |
| CVE-2023-32600 | Rank Math SEO < 1.0.119.1 - Contributor+ Stored XSS | — | Unknown | < 1.0.119.1 | 1.0.119.1 | — | ✓ fixed in latest |
| CVE-2026-77786 | Rank Math SEO < 1.0.277 - Editor+ Core Settings Modification via fix-site-seo Ability | — | Unknown | < 1.0.277 | 1.0.277 | — | ⚠ update needed |
How to fix it
Keep Seo By Rank Math updated — 1.0.275 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- SureRank SEO – Meta Tags, Social Preview, XML Sitemap, Schema & Open Graph — 400000+ active installs — 96/100 (40) — max PHP 8.4
- SEOPress – AI SEO Plugin & On-site SEO — 300000+ active installs — 96/100 (1246) — max PHP <8.0
- 301 Redirects – Redirect Manager — 300000+ active installs — 94/100 (578) — max PHP 8.4
- All 404 Redirect to Homepage — 200000+ active installs — 82/100 (96) — max PHP 8.4
- Easy HTTPS Redirection (SSL) — 100000+ active installs — 84/100 (71) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.