WordPress plugin

Rank Math SEO PRO security & vulnerabilities

seo-by-rank-math-pro— active installsLast vulnerability Oct 16, 2026

No known unpatched vulnerabilities in the latest version

All 3 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

3Known vulnerabilities

Critical1
High0
Medium2
Low0

Vulnerabilities per year

All Rank Math SEO PRO vulnerabilities

Rank Math SEO PRO vulnerabilities
Severity	Vulnerability	CVE	Published
Critical9.8	Unauthenticated Embedded Malicious Code 3.0.123 – 3.0.123Update to 3.0.124	CVE-2026-111862	Oct 16
Medium4.3	Missing Authorization ≤3.0.96Update to 3.0.97	CVE-2026-28080	Oct 8, 2025
Medium6.1	Reflected Cross-Site Scripting ≤3.0.35Update to 3.0.36	CVE-2023-32800	May 22, 2023

Critical9.8
Unauthenticated Embedded Malicious Code
3.0.123 – 3.0.123Update to 3.0.124
CVE-2026-111862Oct 16
Medium4.3
Missing Authorization
≤3.0.96Update to 3.0.97
CVE-2026-28080Oct 8, 2025
Medium6.1
Reflected Cross-Site Scripting
≤3.0.35Update to 3.0.36
CVE-2023-32800May 22, 2023

Rank Math SEO PRO: common questions

Does Rank Math SEO PRO have known vulnerabilities?

Yes. VulnCrest Radar lists 3 known vulnerabilities in Rank Math SEO PRO: 1 critical, 2 medium. None are known to affect version null.

How do I check which version of Rank Math SEO PRO I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Rank Math SEO PRO vulnerability?

CVE-2026-111862, published Oct 16, 2026: Rank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious Code. Severity: Critical (CVSS 9.8).

Is any Rank Math SEO PRO vulnerability listed in CISA KEV?

No. None of the known Rank Math SEO PRO vulnerabilities is currently listed in the CISA KEV catalog.