Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:rankmath:seo:*:*:*:*:*:wordpress:*:*

1 brief RSS
high advisory

Rank Math SEO: PHP object injection remote code execution (CVE-2026-1928)

The Rank Math SEO plugin for WordPress is vulnerable to PHP object injection via the updateMeta REST API endpoint, allowing authenticated contributors to achieve remote code execution through POP chain exploitation.

Rank Math SEO wordpress plugin-vulnerability php-injection rce
1r 2t 1c