Ecosyste.ms: Advisories
An open API service providing security vulnerability metadata for many open source software ecosystems.
Security Advisories: GSA_kwCzR0hTQS1qOTVyLTg2aHgteHd4Z84AAusg
Rank Math SEO plugin vulnerable to Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress.
Permalink: https://github.com/advisories/GHSA-j95r-86hx-xwxgJSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qOTVyLTg2aHgteHd4Z84AAusg
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: over 1 year ago
Updated: over 1 year ago
CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Identifiers: GHSA-j95r-86hx-xwxg, CVE-2022-36376
References:
- https://nvd.nist.gov/vuln/detail/CVE-2022-36376
- https://rankmath.com/changelog/
- https://patchstack.com/database/vulnerability/seo-by-rank-math/wordpress-rank-math-seo-plugin-1-0-95-server-side-request-forgery-ssrf-vulnerability
- https://github.com/advisories/GHSA-j95r-86hx-xwxg
Affected Packages
packagist:rankmath/seo-by-rank-math
Dependent packages: 0Dependent repositories: 0
Downloads: 857 total
Affected Version Ranges: <= 1.0.95
No known fixed version
All affected versions: 1.0.44, 1.0.45, 1.0.46, 1.0.47, 1.0.48, 1.0.49, 1.0.50, 1.0.51, 1.0.52, 1.0.53, 1.0.54, 1.0.55, 1.0.56, 1.0.57, 1.0.58, 1.0.59, 1.0.60, 1.0.61, 1.0.62, 1.0.63, 1.0.64, 1.0.65, 1.0.66, 1.0.67, 1.0.68, 1.0.69, 1.0.70, 1.0.94, 1.0.95