CVE-2024-9314
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Oct 5, 2024
Updated: Jan 29, 2025
CWE ID 502
Summary
CVE-2024-9314 is a vulnerability affecting the Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress. This issue allows authenticated attackers with Administrator-level access to inject PHP Objects through deserialization of untrusted input in the 'set_redirections' function. No Pop chain is present in the vulnerable software, but if one exists via an additional plugin or theme, it could lead to file deletion, data retrieval, or code execution. All versions up to and including 1.0.228 are affected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Rank Math SEO
Affected Vendors
- Rankmath