CVE-2024-9161 - Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete

Back Back to CVE browser

MEDIUM

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings <= 1.0.228 - Missing Authorization to Unauthenticated User and Term Metadata Insert, Update, and Delete

Published Oct 5, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 2.13%

Description

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' function in all versions up to, and including, 1.0.228. This makes it possible for unauthenticated attackers to insert new and update existing metadata beginning with 'rank_math', and delete arbitrary existing user metadata and term metadata. Deleting existing usermeta can cause a loss of access to the administrator dashboard for any registered users, including Administrators.

Affected products

Vendor Rankmath Product Rank Math SEO – AI SEO Tools to Dominate SEO Rankings Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <=1.0.228

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Rankmath

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

unaffected

Version	Status	Constraints
0	affected	<=1.0.228

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (7)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-49763		Advisory
https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L120		Product
https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L161		Product
https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L162		Product
https://plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.php#L64		Product
https://plugins.trac.wordpress.org/changeset/3161896/		Patch
https://www.wordfence.com/threat-intel/vulnerabilities/id/7df39a64-76c5-4ebe-a271-44bd147a3a86?source=cve		Third Party Advisory