{"id":"GHSA-j95r-86hx-xwxg","aliases":["CVE-2022-36376"],"title":"Rank Math SEO plugin vulnerable to Server-Side Request Forgery","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"CRITICAL","description":"Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress.","severity":"critical","score":9.8,"published":"2022-09-10T00:00:27.000Z","modified":"2024-02-21T05:51:31.206Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"rankmath/seo-by-rank-math","sources":[{"name":"OSV · GHSA-j95r-86hx-xwxg","url":"https://osv.dev/vulnerability/GHSA-j95r-86hx-xwxg"}],"ranges":[{"events":[{"introduced":"0"},{"last_affected":"1.0.95"}],"type":"ECOSYSTEM"}],"versions":["v1.0.44","v1.0.45","v1.0.46","v1.0.47","v1.0.47.1","v1.0.47.1-beta","v1.0.48","v1.0.48-beta","v1.0.48-beta-2","v1.0.48.1","v1.0.48.2","v1.0.48.2-beta","v1.0.49","v1.0.49-beta","v1.0.49.1-beta","v1.0.50","v1.0.50.1","v1.0.51","v1.0.52","v1.0.52.1","v1.0.52.2","v1.0.52.3","v1.0.53","v1.0.53.1","v1.0.54","v1.0.54.1","v1.0.54.2","v1.0.54.3","v1.0.55","v1.0.56","v1.0.56-beta","v1.0.56.1","v1.0.57","v1.0.57.1","v1.0.58","v1.0.59","v1.0.59.1","v1.0.60","v1.0.60.1","v1.0.61","v1.0.61.1","v1.0.62","v1.0.63","v1.0.64","v1.0.65","v1.0.66","v1.0.66.1","v1.0.67","v1.0.68","v1.0.68.1","v1.0.69","v1.0.69.1","v1.0.69.2","v1.0.70","v1.0.94","v1.0.95"],"fixed":[]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2022-36376","https://github.com/rankmath/seo-by-rank-math","https://patchstack.com/database/vulnerability/seo-by-rank-math/wordpress-rank-math-seo-plugin-1-0-95-server-side-request-forgery-ssrf-vulnerability","https://rankmath.com/changelog"],"sources":[{"name":"OSV","id":"GHSA-j95r-86hx-xwxg","modified":"2024-02-21T05:51:31.206273Z","url":"https://osv.dev/vulnerability/GHSA-j95r-86hx-xwxg"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T21:25:31.856Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}