CVE-2026-104754

The Rank Math SEO WordPress plugin, in versions prior to 1.0.280 , is vulnerable to a Stored Cross-Site Scripting (XSS) flaw. The root cause is a failure to escape a stored redirection source value before it is rendered in an administrative list view. This allows users with permissions to manage ...

EUVD-2026-96120

The Rank Math SEO WordPress plugin before 1.0.280 does not escape a stored redirection source value before outputting it in an administrative list view, allowing users who can manage redirections Administrators by default to store JavaScript that executes in the session of any user who later open...