CVE-2026-66702

An unauthenticated Cross Site Scripting (XSS) vulnerability exists in Rank Math SEO versions up to 1.0.274.1, allowing attackers to inject malicious scripts into web pages viewed by users. This could lead to session hijacking, data theft, or defacement of the affected sites. Website administrators using vulnerable versions of Rank Math SEO should prioritize immediate updates to mitigate potential exploitation risks.