THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-77786 (MEDIUM 4.9) — The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the Editor role to modify site-wide core WordPress settings that are

[NVD] CVE-2026-77786 (MEDIUM 4.9) — The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the Editor role to modify site-wide core WordPress settings that are

mednvdPublished 2026-08-29

CVE-2026-77786 CVSS: 4.9 MEDIUM Published: 2026-08-29T06:17:44.250

The Rank Math SEO WordPress plugin before 1.0.277 does not check that the user requesting an automated SEO fix holds the capability WordPress itself requires for the settings being changed, allowing users with the Editor role to modify site-wide core WordPress settings that are reserved to administrators.

Indicators of compromise

CVE-2026-77786cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-77786