Rank Math SEO 漏洞列表
共找到 4 个与 Rank Math SEO 相关的漏洞
📅 加载漏洞趋势中...
-
CVE-2020-11514: Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint POC
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint. -
CVE-2020-11515: Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint POC
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI). -
CVE-2020-11514: Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint POC
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint. -
CVE-2020-11515: Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint POC
The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI).