VULNERABILITY INTELLIGENCE
CVE-2026-77786
CVSS score4.9 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-08-29
Last modified2026-08-31
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
Description
The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the Editor role to modify site-wide core WordPress settings that are reserved to administrators.
Weakness classification
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-863