Product
The Rank Math SEO plugin for WordPress is vulnerable to PHP object injection via the updateMeta REST API endpoint, allowing authenticated contributors to achieve remote code execution through POP chain exploitation.