SecAlerts
r

rank math

Security Risk Profile

20
/100
low

Security Risk Score

Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from April 9, 2024 to present

17
Total CVEs
3
Critical+High
0
Exploited
0
Unpatched

Threat Assessment

Avg CVSS
5.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
0
Critical/High
Risk Level
20/100
low
📈 4 in Last 30 Days

Severity Distribution

Critical
0
High
3
Medium
10
Low
4

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
6

Age Distribution

Common Weaknesses (CWE)

1
XSS
5
2
Infoleak
1
3
Code Injection
1
4
Path Traversal
1
5
Input Validation
1

Most Affected Products

1. Rank Math Rank Math SEO7
2. rankmath Seo Wordpress7
3. Rank Math SEO2
4. WordPress Rank Math SEO plugin2
5. Rank Math SEO – AI SEO Tools to Dominate SEO Rankings2

Recent Vulnerabilities

See more →
CVE-2026-77785
CVSS 2.7low

Rank Math SEO < 1.0.277 - Author+ Non-Public Post Content Disclosure via Abilities API

Sep 2, 2026🔧 No Patch
CVE-2026-77784
CVSS 2.7low

Rank Math SEO < 1.0.277 - Author+ Robots and Pillar Content Meta Update on Non-Owned Objects via mark_page_as

Sep 2, 2026🔧 No Patch
CVE-2026-77787
CVSS 2.7low

Rank Math SEO < 1.0.277 - Author+ Term Metadata Update and Cross-Object Post Title Overwrite via updateMetaBulk

Sep 2, 2026🔧 No Patch
CVE-2026-77782
CVSS 5.3medium

Rank Math SEO < 1.0.277.1 - Unauthenticated Password-Protected Post Content Disclosure via Post Metadata and llms.txt

Sep 2, 2026🔧 No Patch
CVE-2025-12714
CVSS 5.3medium

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.271 - Missing Authorization to Unauthenticated Homepage Settings Modification

May 29, 2026🔧 No Patch
CVE-2026-28080
CVSS 4.3EPSS 0%medium

WordPress Rank Math SEO PRO plugin <= 3.0.96 - Broken Access Control vulnerability

Mar 6, 2026🔧 No Patch
CVE-2025-64351
CVSS 4.3medium

WordPress Rank Math SEO plugin <= 1.0.252.1 - Sensitive Data Exposure vulnerability

Oct 31, 2025🔧 No Patch
CVE-2025-64350
CVSS 3.8low

WordPress Rank Math SEO plugin <= 1.0.252.1 - Broken Access Control vulnerability

Oct 31, 2025🔧 No Patch
CVE-2024-13227
CVSS 6.4medium

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.235 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rank Math API

Feb 13, 2025
CVE-2024-11620
CVSS 7.2high

WordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability

Nov 28, 2024

Monitor rank math in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.