RankMath vulnerabilities
We track 4 vulnerabilities in RankMath products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
Latest RankMath vulnerabilities
- 8.8 High severity
Rank Math SEO – AI SEO Tools to Dominate SEO…: Deserialization of Untrusted Data
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.276 via deserialization of untrusted input in the updateMeta REST API endpoint. This makes it possibl
- 9.8 Critical severity
Rank Math SEO PRO: Embedded Malicious Code
Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. Rank Math states that the affected plugin files cont
- 7.2 High severity
Rank Math SEO – AI SEO Tools to Dominate SEO…: Deserialization of Untrusted Data
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.228 via deserialization of untrusted input 'set_redirections' function. This makes it possible for au
- 8.8 High severity
Rank Math SEO: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affects Rank Math SEO: from n/a through 1.0.107.2.