Veille CVE

Mercredi 2 septembre 2026

6 CVE

Critique 0 Élevée 0 Moyenne 2 Faible 4 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Rank Math SEO » ✕
  1. CVE-2026-77788 4.9 Moyenne

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, allowing users with the Author role and above to overwrite arbitrary post and user metadata, including that belonging to higher-privileged users.

  2. CVE-2026-77787 2.7 Faible

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.277 does not perform a capability check when bulk metadata updates target taxonomy terms, and reuses the supplied object identifier across object types, allowing users with the Author role and above to modify the SEO metadata of terms they cannot edit and to overwrite the titles of posts belonging to other users.

  3. CVE-2026-77785 2.7 Faible

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request before returning its content and SEO metadata, allowing users with the Author role and above to read the title, body and metadata of other users' non-public posts.

  4. CVE-2026-77784 2.7 Faible

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.277 does not verify that a user is allowed to edit the object being modified before updating its SEO indexing metadata, allowing users with the Author role and above to alter that metadata on content, taxonomy terms and user profiles they do not own, and to remove other users' content from the site's sitemap and search engine index.

  5. CVE-2026-77783 3.7 Faible

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing unauthenticated visitors to disclose the schema and associated content of draft, pending, private, scheduled and password-protected posts.

  6. CVE-2026-77782 5.3 Moyenne

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated SEO metadata, allowing unauthenticated users to read the content of password-protected posts.