WordPress Rank Math SEO PRO Plugin <= 3.0.35 is vulnerable to Cross Site Scripting (XSS)

CVE-2023-32800

What is CVE-2023-32800?

The Rank Math SEO PRO plugin versions up to 3.0.35 are susceptible to an unauthenticated reflected cross-site scripting (XSS) vulnerability. This security flaw permits attackers to inject malicious scripts into web pages viewed by users. If successfully exploited, such vulnerabilities can lead to session hijacking, data theft, and unauthorized actions performed on behalf of users who access the compromised pages. It is essential for websites using this plugin to apply the necessary updates to mitigate these risks.

References