CVE-2020-11514

PoC —

CVSS 3.1

9.8 critical

EPSS

9%p95

Published

Apr 7, 2020 (Apr 7, 2020)

Modified

Jun 17, 2026

Description

The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to update arbitrary WordPress metadata, including the ability to escalate or revoke administrative privileges for existing users via the unsecured rankmath/v1/updateMeta REST API endpoint.

Vendors: rankmath
Products: seo
Ecosystems: WordPress
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (9.1%)

In the news0 stories

No ingested article mentions this CVE yet.