CVE-2020-11514: Rankmath Seo

Critical severity, CVSS 9.8. EPSS: 9.1% chance of exploitation in the next 30 days.

The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.

Affected products

• Rankmath Seo: up to and including 1.0.40.2

Published 2020-04-07. Last modified 2026-06-17.