Critical PHP Object Injection Vulnerability in Rank Math SEO Plugin for WordPress (CVE-2026-1928)
The Rank Math SEO plugin for WordPress is vulnerable to PHP Object Injection (CVE-2026-1928), with a CVSS score of 8.8. This vulnerability affects all versions up to and including 1.0.276 and allows authenticated attackers with Contributor-level access to inject PHP objects, potentially leading to remote code execution. Immediate patching is recommended to prevent potential exploitation.