Subscriber Broken Access Control in Rank Math SEO Plugin

Publication date: 2026-06-15

Last updated on: 2026-06-15

Assigner: Patchstack

Description

Subscriber Broken Access Control in Rank Math SEO <= 1.0.271 versions.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-06-15

Last Modified

2026-06-15

Generated

2026-07-06

AI Q&A

2026-06-16

EPSS Evaluated

2026-07-04

NVD

CVE-2026-34892

Affected Vendors & Products

Vendor	Product	Version / Range
rank_math	seo	to 1.0.271 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

This vulnerability is a Subscriber Broken Access Control issue in Rank Math SEO versions up to and including 1.0.271.

Impact Analysis

The vulnerability has a CVSS base score of 6.5, indicating a medium severity. It allows a user with low privileges (subscriber level) to perform actions that should be restricted, potentially leading to integrity issues.

Hi! I’m here to help you understand CVE-2026-34892. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70