CVE-2025-12714 | The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings pl… | CVSS 5.3 MEDIUM

Description

The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_site_editor_homepage function in all versions up to, and including, 1.0.271. This makes it possible for unauthenticated attackers to modify several plugin settings including homepage title, meta description, breadcrumbs label, and social media metadata, which can have severe impact on SEO rankings and display malicious content across all site pages where breadcrumbs are used.

Metadata

CVE ID: CVE-2025-12714
State: PUBLISHED
Assigner: Wordfence
Reserved: 2025-11-04 19:56 UTC
Published: 2026-05-29 09:28 UTC
Last updated: 2026-05-29 12:55 UTC
Primary CWE: CWE-862
CWE-862 Missing Authorization
Vendor / Product: rankmath / Rank Math SEO – AI SEO Tools to Dominate SEO Rankings
Sources: cve.org · NVD

Severity & Metrics

5.3 MEDIUM CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
rankmath	Rank Math SEO – AI SEO Tools to Dominate SEO Rankings	—	0 ≤ 1.0.271

Weakness (CWE)

CWE	Source	Description
CWE-862	cna	CWE-862 Missing Authorization

CVSS scores (1)

Score	Severity	Version	Source	Vector
5.3	MEDIUM	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References (6)