CVE-2026-77783 — Rank Math SEO < 1.0.277 - Unauthenticated Non-Public Post Schema and Content Disclosure

CVE-2026-77783

Rank Math SEO < 1.0.277 - Unauthenticated Non-Public Post Schema and Content Disclosure PUBLISHED

Description (CNA)

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing unauthenticated visitors to disclose the schema and associated content of draft, pending, private, scheduled and password-protected posts.

Affected (CNA)

Vendor / product	Versions
Unknown / Rank Math SEO	affected 1.0.48 before 1.0.277

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/c10db1c1-3af9-45ed-af83-ce95211d0251/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.