ThreatPress

WordPress Vulnerabilities Database

Back

WordPress SEO By Rank Math plugin <= 1.0.27 - Authenticated Settings Reset vulnerability

Product
WordPress SEO Plugin – Rank Math
Description
Authenticated Settings Reset vulnerability found in WordPress SEO By Rank Math plugin (versions <= 1.0.27).
Solution
Update the WordPress SEO By Rank Math plugin to the latest available version (at least 1.0.27.1).
Classification
Type BYPASS
OWASP Top 10 A7: Missing Function Level Access Control
References
Plugin changelog
CVE
Name CVE-N/A
Versions
Affected In <= 1.0.27
Fixed In 1.0.27.1
Disclosure date
2019-06-25
Submitter
ThreatPress