Wordfence/patch stack has flagged all of our Rankmath installations vulnerable - Support

Resolved Carl Head
1 year, 6 months ago

Rank Math free

Wordfence/patch stack has flagged all of our Rankmath installations vulnerable to cross site scripting per:

https://patchstack.com/database/vulnerability/seo-by-rank-math-pro/wordpress-rank-math-seo-pro-plugin-3-0-35-reflected-cross-site-scripting-xss-vulnerability?_a_id=110

We’re advised to deactivate/remove the plugin:

Please advise

Viewing 4 replies - 1 through 4 (of 4 total)

RankBot
1 year, 6 months ago

Hello, we apologize for the issue you are facing with the Rank Math installations being flagged as vulnerable by Wordfence/patch stack.

We recommend following the advice provided to deactivate or remove the plugin based on the vulnerability reported. This action will help ensure the security of your website. If you need further assistance or have any questions, please let us know by replying to this ticket.

Thank you for bringing this concern to our attention.

Sources:
Fatal Error Happening on Some Installations After 1.0.49 Update » Rank Math
Is the Rank Math WordPress SEO Plugin Safe to Use? » Rank Math
How to Disable All Rank Math Generated SEO Tags » Rank Math
How to Whitelist Rank Math in Wordfence » Rank Math
Does Installing Rank Math Slow Down My Website? » Rank Math

Miguel
1 year, 6 months ago

Hello,

Thank you for contacting support.

That vulnerability was in version 3.0.35 of the PRO plugin and we are already on version 3.0.60, which has no vulnerabilities.

We fixed that vulnerability in version 3.0.36 back in May 2023.

Don’t hesitate to get in touch if you have any other questions.

Carl Head
1 year, 6 months ago

Rank Math free

Good day,

I”m not sure I understand the versioning, I have the latest version installed, which is 1.0.217; is there a different versioning I should be looking at?

Rank Math SEO with AI Best SEO Tools
Deactivate | Settings | Setup Wizard
Rank Math SEO is the Best WordPress SEO plugin with the features of many SEO and AI SEO tools in a single package to help multiply your SEO traffic.
Version 1.0.217 | By Rank Math | View details | Getting Started | Documentation

Rakibuzzaman Siam
1 year, 6 months ago

Hello,

We’ve different versions for the Rank Math PRO and the free version of the plugin. The Wordfence report was on the Rank Math PRO version which has been fixed.

However, you’re using the free version of the plugin and the latest version of the free plugin is v1.0.217.

For more details, you can check our changelog page: https://rankmath.com/changelog/free/

Hope that helps and please don’t hesitate to let us know if you have any other questions.

Thank you.

RankBot
1 year, 5 months ago

Hello,

Since we did not hear back from you for 15 days, we are assuming that you found the solution. We are closing this support ticket.

If you still need assistance or any other help, please feel free to open a new support ticket, and we will be more than happy to assist.

Thank you.

Viewing 4 replies - 1 through 4 (of 4 total)

The ticket ‘Wordfence/patch stack has flagged all of our Rankmath installations vulnerable’ is closed to new replies.