5.3
Medium
CVE-2026-77782 The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using…
Description
The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated SEO metadata, allowing unauthenticated users to read the content of password-protected posts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Rank Math SEO 1.0 | earliest → < 1.0.277.1 | 1.0.277.1 |
Other CVEs of Rank Math SEO
The 12 CVEs of Rank Math SEO →
CVE-2026-104751
The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its…
5.3
Medium
CVE-2026-104753
The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it…
4.1
Medium
CVE-2026-104754
The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting…
3.5
Low
CVE-2026-104752
The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its…
7.2
High