CVE-2024-9161 Scanner
CVE-2024-9161 Scanner - Missing Authorization vulnerability in Rank Math SEO plugin for WordPress
Used 2.3k times · 5.9k assets checked · domain, subdomain, ipv4
CVE
CVE-2024-9161
6.5
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'update_metadata' function in all versions up to, and including, 1.0.228. This makes it possible for unauthenticated attackers to insert new and update existing metadata beginning with 'rank_math', and delete arbitrary existing user metadata and term metadata. Deleting existing usermeta can cause a loss of access to the administrator dashboard for any registered users, including Administrators.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
rank math seo – ai seo tools to dominate seo rankings
Updated Sep 14, 2026View on NVD →
S4E scanner
CVE history: rank math seo – ai seo tools to dominate seo rankings
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →