WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Rank Math SEO – AI SEO Tools to Dominate SEO Rankings

Grow your organic traffic and AI visibility with powerful SEO tools, XML sitemaps, Schema automation, and built-in AI SEO, all in one place.

25Reported vulnerabilities
9.8Highest CVSS score
1.0.276Latest version
4,000,000+Active installs

What to do now

Update Rank Math SEO – AI SEO Tools to Dominate SEO Rankings to 1.0.277 or later. 25 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 11, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2020-11514 Critical 9.8 9.1% Before 1.0.41 1.0.41 April 7, 2020
CVE-2020-11515 Medium 6.1 2.1% 1.0.40 and earlier 1.0.41 April 7, 2020
CVE-2022-36376 Critical 9.8 1.0% <= 1.0.95 to 1.0.95 (inclusive) 1.0.95.1 September 9, 2022
CVE-2026-81757 High 8.8 0.4% 1.0.276 and earlier 1.0.277 August 27, 2026
CVE-2024-9314 High 7.2 0.8% 0 to 1.0.228 (inclusive)
0 to 1.0.228 (inclusive)		 1.0.229 October 5, 2024
CVE-2024-11620 High 7.2 0.7% 1.0.231 and earlier 1.0.232 November 22, 2024
CVE-2024-9161 Medium 6.5 2.1% 0 to 1.0.228 (inclusive) 1.0.229 October 5, 2024
CVE-2026-66702 High 7.2 0.2% 1.0.274.1 and earlier 1.0.275 July 31, 2026
WF-1ed98565-3f86-46c0-a696-13d678f2d523 High 7.2 — 1.0.26 and earlier 1.0.27 June 18, 2019
CVE-2019-14786 Medium 6.5 1.4% Before 1.0.27.1 1.0.27.1 June 21, 2019
CVE-2023-23888 Medium 6.5 0.9% 1.0.107.2 and earlier 1.0.107.3 January 30, 2023
CVE-2024-4617 Medium 6.4 0.4% 0 to 1.0.218 (inclusive) 1.0.219-beta May 16, 2024
CVE-2023-32600 Medium 6.4 0.4% Before 1.0.119.1 1.0.119.1 July 17, 2023
CVE-2024-13227 Medium 5.4 0.5% 0 to 1.0.235 (inclusive) 1.0.236 February 13, 2025
CVE-2024-4335 Medium 5.4 0.4% 0 to 1.0.217 (inclusive) 1.0.218 May 14, 2024
CVE-2024-3665 Medium 5.4 0.5% 0 to 1.0.216 (inclusive)
0 to 1.0.216 (inclusive)		 1.0.217 April 23, 2024
CVE-2024-2536 Medium 5.4 0.3% 0 to 1.0.214 (inclusive) 1.0.215 April 9, 2024
CVE-2025-12714 Medium 5.3 0.4% 0 to 1.0.271 (inclusive) 1.0.271.1 May 29, 2026
WF-138e0a38-c922-44d1-9fe6-2439ec32cf39 Medium 5.4 — Before 1.0.42.2 1.0.42.2 April 18, 2020
CVE-2024-4627 Medium 4.4 0.4% 1.0.218 and earlier 1.0.219 June 11, 2024
CVE-2026-34892 Medium 4.3 0.3% 1.0.271 and earlier 1.0.271.1 June 3, 2026
CVE-2025-64350 Medium 4.3 0.2% 1.0.252.1 and earlier 1.0.253 September 11, 2025
CVE-2025-64351 Medium 4.3 0.2% 1.0.252.1 and earlier 1.0.253 September 11, 2025
CVE-2024-13229 Medium 4.3 0.4% 0 to 1.0.235 (inclusive) 1.0.236 February 13, 2025
CVE-2026-77786 Low 2.7 0.2% Before 1.0.277 1.0.277 August 29, 2026

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.