Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2026-77786

Rank Math SEO < 1.0.277 - Editor+ Core Settings Modification via fix-site-seo Ability

Description

The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the Editor role to modify site-wide core WordPress settings that are reserved to administrators.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Rank Math SEO

Default version status: unaffected

  • 1.0.271 to < 1.0.277affected

References