Veille CVE

Octobre 2026

4 CVE

Critique 0 Élevée 1 Moyenne 2 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Rank Math SEO » ✕
  1. CVE-2026-104751 5.3 Moyenne

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it.

  2. CVE-2026-104754 3.5 Faible

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections (Administrators by default) to store JavaScript that executes in the session of any user who later opens that view, including a Super Administrator on multisite.

  3. CVE-2026-104753 4.1 Moyenne

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.

  4. CVE-2026-104752 7.2 Élevée

    Unknown Rank Math SEO

    The Rank Math SEO WordPress plugin before 1.0.280 does not correctly validate the type of a file uploaded through its settings import feature, allowing users with administrator-level access to upload a PHP file and achieve remote code execution.