CVE-2026-104753: Unknown Rank Math Seo

Medium severity, CVSS 4.1. EPSS: 0.2% chance of exploitation in the next 30 days.

The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.

Affected products

• Unknown Rank Math Seo: before 1.0.280 (fixed in 1.0.280)

Published 2026-10-10. Last modified 2026-10-10.