Medium severity4.9NVD Advisory· Published Sep 2, 2026· Updated Sep 2, 2026

CVE-2026-77788

Description

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the metadata row being updated belongs to the object the user was authorised against, allowing users with the Author role and above to overwrite arbitrary post and user metadata, including that belonging to higher-privileged users.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

WordPress/Seo By Rank Mathllm-fuzzy
Range: <1.0.277
Package: https://wordpress.org/plugins/seo-by-rank-math

Patches

Vulnerability mechanics

References

wpscan.com/vulnerability/c02511a0-9c8b-44cd-b25f-e95cf5f9fef3/nvd

News mentions

No linked articles in our index yet.

cvss	0.319
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000