CVE-2020-11515

The Rank Math plugin through 1.0.40.2 for WordPress allows unauthenticated remote attackers to create new URIs (that redirect to an external web site) via the unsecured rankmath/v1/updateRedirection REST API endpoint. In other words, this is not an "Open Redirect" issue; instead, it allows the attacker to create a new URI with an arbitrary name (e.g., the /exampleredirect URI).

• CWE-601

• https://rankmath.com/changelog/Product, Release Notes
• https://wordpress.org/plugins/seo-by-rank-math/#developersProduct
• https://www.wordfence.com/blog/2020/03/critical-vulnerabilities-affecting-over-200000-sites-patched-in-rank-math-seo-plugin/Exploit, Third Party Advisory
• https://rankmath.com/changelog/Product, Release Notes
• https://wordpress.org/plugins/seo-by-rank-math/#developersProduct
• https://www.wordfence.com/blog/2020/03/critical-vulnerabilities-affecting-over-200000-sites-patched-in-rank-math-seo-plugin/Exploit, Third Party Advisory

Published

Apr 7, 2020

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11508An XSS vulnerability in the WP Lead Plus X plugin through 0.…5.4
• CVE-2020-11509An XSS vulnerability in the WP Lead Plus X plugin through 0.…6.1
• CVE-2020-1151An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-11511The LearnPress plugin before 3.2.6.9 for WordPress allows re…8.1
• CVE-2020-11512Stored XSS in the IMPress for IDX Broker WordPress plugin be…5.4
• CVE-2020-11514The Rank Math plugin through 1.0.40.2 for WordPress allows u…9.8
• CVE-2020-11516Stored XSS in the Contact Form 7 Datepicker plugin through 2…5.4
• CVE-2020-11518Zoho ManageEngine ADSelfService Plus before 5815 allows unau…9.8
• CVE-2020-11519The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earli…7.8
• CVE-2020-1152<p>An elevation of privilege vulnerability exists when Windo…5.8
• CVE-2020-11520The SDDisk2k.sys driver of WinMagic SecureDoc v8.5 and earli…7.8
• CVE-2020-11521libfreerdp/codec/planar.c in FreeRDP version > 1.0 through 2…6.6