Unauthorized Access Vulnerability in Rank Math SEO Plugin for WordPress
CVE-2025-12714

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Rank Math Seo – Ai Seo Tools To Dominate Seo Rankings
Vendor
CVE Published:
29 May 2026

What is CVE-2025-12714?

The Rank Math SEO plugin for WordPress is affected by a vulnerability that allows unauthorized access due to a missing capability check in the update_site_editor_homepage function. This flaw enables unauthenticated attackers to manipulate critical plugin settings, including homepage titles, meta descriptions, and social media metadata. Such unauthorized modifications can severely impact SEO rankings and present malicious content on all pages utilizing breadcrumbs, compromising the overall integrity and functionality of the website.

Affected Version(s)

Rank Math SEO – AI SEO Tools to Dominate SEO Rankings 0 <= 1.0.271

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/seo-by-rank-ma...
https://plugins.trac.wordpress.org/browser/seo-by-rank-ma...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Michael Mazzolini
abrahack
.