CVE-2020-11515

The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the…

published April 7, 2020

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02072 · 81.3th percentile
Published
2020-04-07T16:51Z
EPSS history
Timeline
  • 07 APR 16:51Z
    The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the…
    cvelistv5