WordPress Plugin Vulnerabilities

Seo By Rank Math <= 1.0.27 - Authenticated Settings Reset

Description

Allows any authenticated user (with a role as low as subscriber) to reset Settings of the plugin.

Proof of Concept

Affects Plugins

Plugin icon
seo-by-rank-math
Fixed in 1.0.27.1

References

CVE
CVE-2019-14786
URL
https://plugins.trac.wordpress.org/browser/seo-by-rank-math/tags/1.0.27.1/includes/admin/class-options.php?rev=2109985#L202

Miscellaneous

Verified
No
WPVDB ID
0ba2cca4-5255-40ec-9948-7653da030d7e

Timeline

Publicly Published
2019-06-21 (about 6 years ago)
Added
2019-06-21 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2019-03-26
Title
Nested Pages <= 3.0.7 - Post Edit Bypass
Published
2025-07-24
Title
Timber < 1.23.3 - Use of a Vulnerable Dependency
Published
2016-04-25
Title
iThemes Security <= 5.3.5 - Lack of Capability Check
Published
2023-10-30
Title
EventPrime < 3.3.6 - Booking Pricing Bypass
Published
2018-02-08
Title
Swape Theme - Authentication Bypass and Stored XSS