CVE-2024-11620: WordPress Rank Math SEO plugin <= 1.0.231 - Arbitrary .htaccess Overwrite to Remote Code Execution (RCE) vulnerability
Published Nov 28, 2024
·Updated
Improper Control of Generation of Code ('Code Injection') vulnerability in Rank Math SEO Rank Math SEO seo-by-rank-math allows Code Injection.This issue affects Rank Math SEO: from n/a through <= 1.0.231.
Affected Software
1 affected component
Rank Math Rank Math SEO<=1.0.231
Remediation
Information
Update the WordPress Rank Math SEO plugin to the latest available version (at least 1.0.232).
Event History
Nov 28, 2024
CVE Published
via MITRE·10:34 AM
Data Sourced
via MITRE·10:34 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-11620?
The severity of CVE-2024-11620 is classified as critical due to its potential for arbitrary code execution.
2
How do I fix CVE-2024-11620?
To fix CVE-2024-11620, upgrade Rank Math SEO to version 1.0.232 or later.
3
What versions of Rank Math SEO are affected by CVE-2024-11620?
CVE-2024-11620 affects all versions of Rank Math SEO up to and including 1.0.231.
4
What type of vulnerability is CVE-2024-11620?
CVE-2024-11620 is an improper control of generation of code, resulting in a code injection vulnerability.
5
What are the potential impacts of CVE-2024-11620?
The potential impacts of CVE-2024-11620 include unauthorized execution of code, leading to potential site takeover.