Rankology SEO – On-site SEO <= 2.2.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
highThe Rankology SEO – On-site SEO plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the save_rankology_settings() function in all versions up to, and including, 2.2.4. This makes it possible for authenticated attackers, with...
- CVSS:
- 8.8
- Affected:
- up to 2.2.4
- Fixed in:
- 2.2.5
- Disclosed:
- Apr 10, 2025