Medium severity4.9NVD Advisory· Published Aug 29, 2026· Updated Aug 31, 2026
CVE-2026-77786
CVE-2026-77786
Description
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the Editor role to modify site-wide core WordPress settings that are reserved to administrators.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.0.277
Patches
Vulnerability mechanics
References
1News mentions
2- Wordfence Intelligence Weekly WordPress Vulnerability Report (August 24, 2026 to August 30, 2026)Wordfence Blog · Sep 3, 2026
- WordPress Plugins: 25 Vulnerabilities Disclosed, Including Critical Auth Bypass and RCE FlawsVypr Intelligence · Aug 30, 2026