7.2
Élevée
CVE-2026-104752 The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its…
Description
The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Rank Math SEO 1.0 | premières → < 1.0.280 | 1.0.280 |
Références
- wpscan.com wpscan.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Rank Math SEO
Les 12 CVE de Rank Math SEO →
CVE-2026-104751
The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its…
5.3
Moyenne
CVE-2026-104753
The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it…
4.1
Moyenne
CVE-2026-104754
The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting…
3.5
Faible
CVE-2026-77788
The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the…
4.9
Moyenne