WordPress CVEs

Description

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.276 via deserialization of untrusted input in the updateMeta REST API endpoint. This makes it possible forauthenticated attackers, with Contributor-level access and above, to inject a PHP Object. The additional presence of a POP chain allows attackers to achieve remote code execution by writing a webshell to the uploads directory.

Affected WordPress components

• Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Plugin · seo-by-rank-math
  Confirmed match Active
  Up to and including 1.0.276
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• rankmath Rank Math SEO – AI SEO Tools to Dominate SEO Rankings — Up to and including 1.0.276

References

• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/seo-by-rank-math/tags/1.0.263/includes/modules/schema/class-db.php#L66
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/seo-by-rank-math/tags/1.0.263/includes/rest/class-sanitize.php#L110
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/browser/seo-by-rank-math/tags/1.0.263/includes/rest/class-shared.php#L446
• plugins.trac.wordpress.org https://plugins.trac.wordpress.org/changeset/3666725/
• www.wordfence.com https://www.wordfence.com/threat-intel/vulnerabilities/id/cd4395be-7b4c-46b0-be00-7dedc6691f4a?source=cve
• nvd.nist.gov Official NVD record