PT-2024-17142 · Unknown · Rank Math Seo

Rafie Muhammad · Published 2024-11-28 · Updated 2024-12-03 · CVE-2024-11620

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Rank Math SEO versions 1.0.2 through 1.0.231

Description A Code Injection vulnerability exists in Rank Math SEO, allowing improper control of code generation. This issue enables code injection, potentially leading to security breaches. The estimated number of affected devices and real-world incidents are not specified.

Recommendations For Rank Math SEO versions 1.0.2 through 1.0.231, update to a version newer than 1.0.231 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2024-11620

Affected Products

Rank Math Seo

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-11620 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/seo-by-rank-math/vulnerability/wordpress-rank-math-seo-plugin-1-0-231-arbitrary-htaccess-overwrite-to-remote-code-execution-rce-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1862087251200483454 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/seo-by-rank-math/vulnerability/wordpress-rank-math-seo-plugin-1-0-231-arbitrary-htaccess-overwrite-to-remote-code-execution-rce-vulnerability?_s_id=cve · Note
• https://t.me/latest_high_impact_cve/1586 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1862163016923426990 · Twitter Post
• https://twitter.com/cracbot/status/1863825580669747202 · Twitter Post