Rank Math — Vulnerabilities & Security Advisories 4

Rank Math is a WordPress SEO plugin that helps optimize content for search engines. Historically, it has been susceptible to cross-site scripting (XSS) and remote code execution (RCE) vulnerabilities, often through insufficient input sanitization and improper access controls. In 2021, a critical RCE flaw (CVE-2021-24796) allowed attackers to execute arbitrary code via the plugin's import functionality. The plugin has also faced privilege escalation issues where lower-privileged users could access sensitive features. While no major public breaches have been widely documented, its four CVEs highlight ongoing security challenges in handling user inputs and maintaining proper access controls within WordPress environments.