Beveiligingsadvies

CVE-2026-77788

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-02 06:00:19

Laatst bijgewerkt 2026-09-02 10:45:56

Toegewezen door WPScan

CVSS-score 4.9

Status PUBLISHED

Beschrijving

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, allowing users with the Author role and above to overwrite arbitrary post and user metadata, including that belonging to higher-privileged users.

← Alle CVE's bekijken Bekijk op cve.org ↗