CVE-2021-39312: Trueranker True Ranker

High severity, CVSS 7.5. EPSS: 77.9% chance of exploitation in the next 30 days.

The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.php file.

Affected products

• Trueranker True Ranker: up to and including 2.2.2

Published 2021-12-14. Last modified 2026-06-17.