← back
CVE-2023-23888highobserved exploitationCWE-22

WordPress Rank Math SEO plugin <= 1.0.107.2 - Local File Inclusion vulnerability

43Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck.

ssvc Actcvss 7.6epss 0.9%
from disclosure to weapon
Published on NVDMay 17
VulnCheckJan 30
exploitation probability
0.9%top 41% of all CVEs
observed exploitation
yesVulnCheck
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affects Rank Math SEO: from n/a through 1.0.107.2.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L