{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.95"}],"component":"rankmath/seo-by-rank-math","cve_ids":["CVE-2022-36376"],"ecosystem":"Packagist","epss":0.0099,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-j95r-86hx-xwxg","id":"tcs_01M5KF4E1TAVMC70VA69Z03EFS","modified_at":"2024-02-21T05:51:31.206273Z","published_at":"2022-09-10T00:00:27Z","references":["https://osv.dev/vulnerability/GHSA-j95r-86hx-xwxg","https://nvd.nist.gov/vuln/detail/CVE-2022-36376","https://github.com/rankmath/seo-by-rank-math","https://patchstack.com/database/vulnerability/seo-by-rank-math/wordpress-rank-math-seo-plugin-1-0-95-server-side-request-forgery-ssrf-vulnerability","https://rankmath.com/changelog"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-j95r-86hx-xwxg","url":"https://osv.dev/vulnerability/GHSA-j95r-86hx-xwxg"}],"summary":"Rank Math SEO plugin vulnerable to Server-Side Request Forgery"}