CVE Catalog

CVE-2026-34892

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.27%

19th percentile — higher than 19% of all known CVEs

Summary

There is a broken access control issue in Rank Math SEO versions up to 1.0.271 that may allow unauthorized users to access subscription features.

Risk Assessment

Organizations may be exposed to unauthorized access to subscriber data, potentially leading to information leaks or abuse.

Recommendation

It is recommended to update the Rank Math SEO plugin to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS