What is GHSA-r8jc-g7jp-q2rh?

GHSA-r8jc-g7jp-q2rh is a security advisory published by GitHub Security Advisories with Low severity. The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is...

Which CVE IDs does GHSA-r8jc-g7jp-q2rh cover?

GHSA-r8jc-g7jp-q2rh covers the following CVE IDs: CVE-2026-77785. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r8jc-g7jp-q2rh?

GHSA-r8jc-g7jp-q2rh has a CVSS v3 base score of 2.7, published by GitHub Security Advisories.

GHSA-r8jc-g7jp-q2rhLowCVSS 2.7

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is...

Vendor

GitHub Security Advisories

Published

September 2, 2026

Last Modified

September 2, 2026

🔗 CVE IDs covered (1)

CVE-2026-77785 →

📋 Description

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the requesting user is permitted to read the specific post referenced in a request before returning its content and SEO metadata, allowing users with the Author role and above to read the title, body and metadata of other users' non-public posts.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-77785
https://wpscan.com/vulnerability/7cf8aa8a-7ac2-4e70-a7af-3f23e4ac1824
https://github.com/advisories/GHSA-r8jc-g7jp-q2rh