CVE-2020-11514: Critical severity rank math seo vulnerability
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-11514?
CVE-2020-11514 is considered a critical vulnerability that allows unauthenticated remote attackers to manipulate WordPress metadata.
How do I fix CVE-2020-11514?
To fix CVE-2020-11514, update the Rank Math plugin to version 1.0.40.3 or later.
What can attackers do with CVE-2020-11514?
Attackers can exploit CVE-2020-11514 to update arbitrary WordPress metadata, potentially escalating privileges for existing users.
Which version of Rank Math is affected by CVE-2020-11514?
CVE-2020-11514 affects Rank Math plugin versions up to and including 1.0.40.2.
Is authentication required to exploit CVE-2020-11514?
No, CVE-2020-11514 can be exploited by unauthenticated remote attackers.