WordPress Rank Math SEO plugin < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion vulnerability

Unauthenticated SEO Analyzer Results Deletion vulnerability discovered by Duy Tran in WordPress Plugin Rank Math SEO versions 1.0.280...

CVE-2026-104751 Rank Math SEO < 1.0.280 - Unauthenticated SEO Analyzer Results Deletion

The Rank Math SEO WordPress plugin before 1.0.280 does not perform a capability or nonce check before clearing its stored SEO analysis data, allowing unauthenticated users to delete it...

CVE-2026-15085 AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-076

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI SEO/GEO Analyzer allows Stored XSS. This issue affects AI SEO/GEO Analyzer versions: from 0.0.0 to 1.1.3...

CVE-2026-15085

Improper Neutralization of Input During Web Page Generation "Cross-site Scripting" vulnerability in Drupal AI SEO/GEO Analyzer allows Stored XSS. This issue affects AI SEO/GEO Analyzer versions: from 0.0.0 to 1.1.3...