Medium severity5.3NVD Advisory· Published May 29, 2026· Updated May 29, 2026
CVE-2025-12714
CVE-2025-12714
Description
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_site_editor_homepage function in all versions up to, and including, 1.0.271. This makes it possible for unauthenticated attackers to modify several plugin settings including homepage title, meta description, breadcrumbs label, and social media metadata, which can have severe impact on SEO rankings and display malicious content across all site pages where breadcrumbs are used.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=1.0.271+ 1 more
- (no CPE)range: <=1.0.271
- (no CPE)range: <=1.0.271
Patches
Vulnerability mechanics
References
6- plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-rest-helper.phpnvd
- plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.phpnvd
- plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.phpnvd
- plugins.trac.wordpress.org/browser/seo-by-rank-math/trunk/includes/rest/class-shared.phpnvd
- plugins.trac.wordpress.org/changeset/3552223/seo-by-rank-math/trunk/includes/rest/class-rest-helper.phpnvd
- www.wordfence.com/threat-intel/vulnerabilities/id/dd072774-6f85-42de-a9d4-6826703ad839nvd
News mentions
2- Wordfence Intelligence Weekly WordPress Vulnerability Report (May 25, 2026 to May 31, 2026)Wordfence Blog · Jun 4, 2026
- WordPress Plugin Batch: 25 CVEs Across 20+ Plugins Disclosed in Late May 2026Vypr Intelligence · May 31, 2026