RankMath has 2 CVEs on record. 2 were published in the last 90 days. The median CVSS is 9.3 (critical), with 1 rated critical.
CVEs per month
Last 12 months, by publish date
1225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/101126/11
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 9.3
- Publish → KEV
- —
- Last 90 days
- 2 prev 0
Products
- Rank Math SEO PRO 1
- Rank Math SEO – AI SEO Tools to Dominate SEO Rankings 1
2
Total CVEs
1
Critical
0
CISA KEV
0
Exploited
RankMath vulnerabilities
CVEs affecting RankMath, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-1928High· 8.8Rank Math SEO <= 1.0.276 - Authenticated (Contributor+) PHP Object Injection to Remote Code Execution
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.0.276 via deserialization of untrusted input in the updateMeta REST API endpoint…
▾ Twilightrankmath · Rank Math SEO – AI SEO Tools to Dominate SEO RankingsEPSS 0.54%via CVEORG
CVE-2026-111862Critical· 9.8Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code
Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123 packages downloaded or updated between October 15, 2026 at 20:02 UTC and October 16, 2026 at 07:12 UTC. Rank Math states that the aff…
▾ MidnightRankMath · Rank Math SEO PROEPSS 0.66%via CVEORG