CVE-2025-12714
Deferred Deferred - Pending Action
Unauthenticated Access in Rank Math SEO Plugin

Publication date: 2026-05-29

Last updated on: 2026-05-29

Assigner: Wordfence

Description
The Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the update_site_editor_homepage function in all versions up to, and including, 1.0.271. This makes it possible for unauthenticated attackers to modify several plugin settings including homepage title, meta description, breadcrumbs label, and social media metadata, which can have severe impact on SEO rankings and display malicious content across all site pages where breadcrumbs are used.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-05-29
Last Modified
2026-05-29
Generated
2026-06-19
AI Q&A
2026-05-29
EPSS Evaluated
2026-06-18
NVD
CVE-2025-12714
EUVD
EUVD-2025-209984
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
rank_math seo_tools to 1.0.271 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

The vulnerability exists in the Rank Math SEO – AI SEO Tools to Dominate SEO Rankings plugin for WordPress, specifically in versions up to and including 1.0.271. It is caused by a missing capability check on the update_site_editor_homepage function, which allows unauthenticated attackers to access and modify several plugin settings.

  • Attackers can change the homepage title.
  • Attackers can modify the meta description.
  • Attackers can alter the breadcrumbs label.
  • Attackers can change social media metadata.

These unauthorized changes can affect SEO rankings and potentially display malicious content across all site pages where breadcrumbs are used.

Impact Analysis

This vulnerability can have a severe impact on your website's SEO rankings by allowing attackers to modify critical SEO-related settings such as homepage title, meta description, breadcrumbs label, and social media metadata.

Additionally, attackers can display malicious content across all site pages where breadcrumbs are used, which can harm your site's reputation and potentially mislead visitors.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-12714. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart