CVE-2026-104753 — Rank Math SEO < 1.0.280 - Admin+ SQLi via 'per_page' Parameter
The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as admini…
Published: 2026-10-10 · CVSS: 4.1 · CVSS 3.1
The Rank Math SEO WordPress plugin before 1.0.280 does not properly sanitise and escape a parameter before using it in a SQL query, allowing high-privilege users such as administrators to perform SQL injection attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7