Rank Math SEO WordPress Plugin Missing Authorization Vulnerability for Unauthenticated Homepage Settings Modification

A vulnerability exists in the Rank Math SEO WordPress plugin, specifically in versions through 1.0.271, due to a lack of proper capability checks in the 'update_site_editor_homepage' function. This flaw allows unauthenticated users to alter various homepage SEO settings, such as the title, meta description, breadcrumbs label, and social media metadata. These unauthorized changes can significantly disrupt SEO performance and introduce malicious content on pages that utilize breadcrumbs.

Impact

Exploitation of this vulnerability could lead to unauthorized modifications of critical SEO settings, potentially harming the site's search engine rankings and allowing for the injection of harmful content into the site's breadcrumb trails.

Reproduction

To reproduce this vulnerability, send a POST request to the WordPress REST API endpoint '/wp/v2/updateMeta' without authentication. Include parameters to specify the object ID, object type, and the meta data to be updated. The absence of a capability check for unauthenticated users allows these changes to be made without authorization.

Remediation

Users are advised to update the Rank Math SEO plugin to version 1.0.271.1 or later.