Description: Privilege Escalation via Unprotected REST API Endpoint
Affected Plugin: WordPress SEO Plugin – Rank Math
Plugin Slug: seo-by-rank-math
Affected Versions: <= 1.0.40.2
CVE ID: Will be updated once identifier is supplied.
CVSS Score: 10.0 (Critical)
CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Fully Patched Version: 10.0.41

Detaylar: https://www.wordfence.com/blog/2020/...th-seo-plugin/