Skip to content
Sign in
6.4 Medium

CVE-2024-13227 The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site…

Description

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Rank Math API in all versions up to, and including, 1.0.235 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

Affected products and versions

Product Affected versions Fixed in
Rank Math SEO – AI SEO Tools to Dominate SEO Rankings 1.0 earliest → 1.0.235 No fix stated

Other CVEs of Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

The 10 CVEs of Rank Math SEO – AI SEO Tools to Dominate SEO Rankings →
CVE-2026-1928 The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection… 8.8 High CVE-2025-12714 The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access… 5.3 Medium CVE-2024-13229 The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized loss of… 4.3 Medium CVE-2024-9314 The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection… 7.2 High
Track this CVE